Analysis
-
max time kernel
42s -
max time network
51s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
03/07/2024, 18:40
General
-
Target
e2054d69dbcd196f8a2dfec391c09bc39813f404466e1b8cf23e04ed2456bf2f.exe
-
Size
1.0MB
-
MD5
265cf7ecb56420560a6d54d96f185d9f
-
SHA1
3c5e584d96444dbcaf4a5ce6d97e73647a18a739
-
SHA256
e2054d69dbcd196f8a2dfec391c09bc39813f404466e1b8cf23e04ed2456bf2f
-
SHA512
bd9efbe834da7ca22dcb711d4ac8cfbb5a93da52283fe0170cdfcebdfb005ad205b0d7bd3c1df1fa927df3cfce210e0567ddb726ec95231cf5525e83fcdfeede
-
SSDEEP
24576:NJMahBRCPOtZ0Q9m256qEV53I3irri+XugHawdVoDvmKS2gOmdo:NJP/sQ82/srriAugHawdOsOmdo
Score
6/10
Malware Config
Signatures
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e2054d69dbcd196f8a2dfec391c09bc39813f404466e1b8cf23e04ed2456bf2f.exe"C:\Users\Admin\AppData\Local\Temp\e2054d69dbcd196f8a2dfec391c09bc39813f404466e1b8cf23e04ed2456bf2f.exe"1⤵
- Writes to the Master Boot Record (MBR)
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.7MB
-
Filesize
2.7MB
-
Filesize
2.7MB
-
Filesize
2.7MB