Analysis
-
max time kernel
150s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
24/06/2024, 10:43
General
-
Target
d265d49801391bcfa4535e7edfbf0db2bd545f563d697c1a85d0282ca0f14baf.exe
-
Size
3.4MB
-
MD5
4f77d5f10e94490ec2a77bbce41510b8
-
SHA1
833e12c924b415363b5b2c3d7563c0afffbe2040
-
SHA256
d265d49801391bcfa4535e7edfbf0db2bd545f563d697c1a85d0282ca0f14baf
-
SHA512
d957b33792b7ef905e6bf2471f256ba06decb2aa46b9ce84dcb82120a190bc6ec5cbdcc8546a6f034fb93bb0a34153ad01f08236be1aaece9b2601f497e99a33
-
SSDEEP
12288:6CKeGGfG6udZpIcJPQLGCQaOHbOceDg6frUgVBy9:6CKeGG8dZ/QiuOCcQg6DUgVE9
Score
6/10
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d265d49801391bcfa4535e7edfbf0db2bd545f563d697c1a85d0282ca0f14baf.exe"C:\Users\Admin\AppData\Local\Temp\d265d49801391bcfa4535e7edfbf0db2bd545f563d697c1a85d0282ca0f14baf.exe"1⤵
- Writes to the Master Boot Record (MBR)
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB