Analysis

  • max time kernel
    141s
  • max time network
    51s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16-06-2024 16:50

General

  • Target

    b31b583c0919b47cd43e4904149c37672a4c17a6505e3c2aa77ea69696c5b21e.exe

  • Size

    621KB

  • MD5

    9cf76597ae1c9a448904954d3129271f

  • SHA1

    a348f5a24ac667ecb1d5fd47f2ad723b6e4d6132

  • SHA256

    b31b583c0919b47cd43e4904149c37672a4c17a6505e3c2aa77ea69696c5b21e

  • SHA512

    7b08ee2b929e186bd4a277335f61945fa705b21fc3dd2b2d0b4090a84d98e57d72dc4d42b02db9d11b2cb32d441ab6a47cf7f6ffa25291f26302c2c96817230f

  • SSDEEP

    12288:g1bFn9tttvVMviYvGzRQiYTBiqdn+K+3MsH/8:glF3/CiYvGdQiSUUnruHU

Score
6/10

Malware Config

Signatures

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\b31b583c0919b47cd43e4904149c37672a4c17a6505e3c2aa77ea69696c5b21e.exe
    "C:\Users\Admin\AppData\Local\Temp\b31b583c0919b47cd43e4904149c37672a4c17a6505e3c2aa77ea69696c5b21e.exe"
    1⤵
    • Writes to the Master Boot Record (MBR)
    PID:2204

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2204-1-0x0000000000780000-0x0000000000880000-memory.dmp

    Filesize

    1024KB

  • memory/2204-2-0x0000000002120000-0x000000000218B000-memory.dmp

    Filesize

    428KB

  • memory/2204-3-0x0000000000400000-0x000000000046F000-memory.dmp

    Filesize

    444KB

  • memory/2204-4-0x0000000000400000-0x00000000004AB000-memory.dmp

    Filesize

    684KB

  • memory/2204-5-0x0000000000400000-0x00000000004AB000-memory.dmp

    Filesize

    684KB

  • memory/2204-7-0x0000000000780000-0x0000000000880000-memory.dmp

    Filesize

    1024KB

  • memory/2204-8-0x0000000002120000-0x000000000218B000-memory.dmp

    Filesize

    428KB

  • memory/2204-9-0x0000000000400000-0x000000000046F000-memory.dmp

    Filesize

    444KB