Analysis
-
max time kernel
140s -
max time network
126s -
platform
windows11-21h2_x64 -
resource
win11-20240508-en -
resource tags
arch:x64arch:x86image:win11-20240508-enlocale:en-usos:windows11-21h2-x64system -
submitted
16-06-2024 17:31
Static task
static1
Behavioral task
behavioral1
Sample
0f11ba5a1239aea4a1a9f58fa375c9d5fd0ddfe52e67aaddca6a371f49f9213c.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral2
Sample
0f11ba5a1239aea4a1a9f58fa375c9d5fd0ddfe52e67aaddca6a371f49f9213c.exe
Resource
win11-20240508-en
General
-
Target
0f11ba5a1239aea4a1a9f58fa375c9d5fd0ddfe52e67aaddca6a371f49f9213c.exe
-
Size
640KB
-
MD5
f163a78d48e34219ed4346390e38ae77
-
SHA1
d9abd1ae037060141562855d473581a6803cb32f
-
SHA256
0f11ba5a1239aea4a1a9f58fa375c9d5fd0ddfe52e67aaddca6a371f49f9213c
-
SHA512
3d7ed5ac6bf0176af285f661809e2ce5f8447dea2cd4dd2c5e6d179d176f3489be81a428f3d1921564d99704d29759db0cffa71b03921186e7f9a9f23acda23d
-
SSDEEP
12288:Pgil4Hk9vX+d+T9lzoGADobfa4L9zfuxAYLcELioPuZm7:ZGEBudS0G64LBd0t2w
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
Processes:
0f11ba5a1239aea4a1a9f58fa375c9d5fd0ddfe52e67aaddca6a371f49f9213c.exedescription ioc process File opened for modification \??\PHYSICALDRIVE0 0f11ba5a1239aea4a1a9f58fa375c9d5fd0ddfe52e67aaddca6a371f49f9213c.exe