Analysis

  • max time kernel
    141s
  • max time network
    95s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    17-06-2024 07:31

General

  • Target

    d1a3887d1838d02251d2d2bae4bb927a148779b2f60843d578c84cc2027aa715.exe

  • Size

    621KB

  • MD5

    05bfda4cd6415cb753db2d15326d1b46

  • SHA1

    9099514dd5982aad11a9b10d0f59f11c2b5dc506

  • SHA256

    d1a3887d1838d02251d2d2bae4bb927a148779b2f60843d578c84cc2027aa715

  • SHA512

    2e1c43b40814c733e06035e0981cca4e35b9f2c98de313ba406b5df85031c3a787ddd1cd3654fc699c24ee243096ae0d1a6b8e42341350f9e14c808f5e19adf2

  • SSDEEP

    12288:AG6CL8F5Y5k1WwCg2As1plR9YQb3hFBE1XT7jBJRFAO:N6CAswCggn7eQbK9zXrAO

Score
6/10

Malware Config

Signatures

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\d1a3887d1838d02251d2d2bae4bb927a148779b2f60843d578c84cc2027aa715.exe
    "C:\Users\Admin\AppData\Local\Temp\d1a3887d1838d02251d2d2bae4bb927a148779b2f60843d578c84cc2027aa715.exe"
    1⤵
    • Writes to the Master Boot Record (MBR)
    PID:4080

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4080-1-0x0000000000810000-0x0000000000910000-memory.dmp

    Filesize

    1024KB

  • memory/4080-2-0x0000000000740000-0x00000000007AB000-memory.dmp

    Filesize

    428KB

  • memory/4080-3-0x0000000000400000-0x000000000046F000-memory.dmp

    Filesize

    444KB

  • memory/4080-4-0x0000000000400000-0x00000000004AB000-memory.dmp

    Filesize

    684KB

  • memory/4080-5-0x0000000000400000-0x00000000004AB000-memory.dmp

    Filesize

    684KB

  • memory/4080-6-0x0000000000810000-0x0000000000910000-memory.dmp

    Filesize

    1024KB

  • memory/4080-8-0x0000000000740000-0x00000000007AB000-memory.dmp

    Filesize

    428KB

  • memory/4080-9-0x0000000000400000-0x000000000046F000-memory.dmp

    Filesize

    444KB