Analysis

  • max time kernel
    140s
  • max time network
    144s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240508-en
  • resource tags

    arch:x64arch:x86image:win11-20240508-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    17/06/2024, 07:31

General

  • Target

    d1a3887d1838d02251d2d2bae4bb927a148779b2f60843d578c84cc2027aa715.exe

  • Size

    621KB

  • MD5

    05bfda4cd6415cb753db2d15326d1b46

  • SHA1

    9099514dd5982aad11a9b10d0f59f11c2b5dc506

  • SHA256

    d1a3887d1838d02251d2d2bae4bb927a148779b2f60843d578c84cc2027aa715

  • SHA512

    2e1c43b40814c733e06035e0981cca4e35b9f2c98de313ba406b5df85031c3a787ddd1cd3654fc699c24ee243096ae0d1a6b8e42341350f9e14c808f5e19adf2

  • SSDEEP

    12288:AG6CL8F5Y5k1WwCg2As1plR9YQb3hFBE1XT7jBJRFAO:N6CAswCggn7eQbK9zXrAO

Score
6/10

Malware Config

Signatures

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\d1a3887d1838d02251d2d2bae4bb927a148779b2f60843d578c84cc2027aa715.exe
    "C:\Users\Admin\AppData\Local\Temp\d1a3887d1838d02251d2d2bae4bb927a148779b2f60843d578c84cc2027aa715.exe"
    1⤵
    • Writes to the Master Boot Record (MBR)
    PID:1456

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1456-1-0x0000000000790000-0x0000000000890000-memory.dmp

    Filesize

    1024KB

  • memory/1456-2-0x0000000000720000-0x000000000078B000-memory.dmp

    Filesize

    428KB

  • memory/1456-3-0x0000000000400000-0x000000000046F000-memory.dmp

    Filesize

    444KB

  • memory/1456-4-0x0000000000400000-0x00000000004AB000-memory.dmp

    Filesize

    684KB

  • memory/1456-5-0x0000000000400000-0x00000000004AB000-memory.dmp

    Filesize

    684KB

  • memory/1456-7-0x0000000000790000-0x0000000000890000-memory.dmp

    Filesize

    1024KB

  • memory/1456-8-0x0000000000720000-0x000000000078B000-memory.dmp

    Filesize

    428KB

  • memory/1456-9-0x0000000000400000-0x000000000046F000-memory.dmp

    Filesize

    444KB