Analysis

  • max time kernel
    140s
  • max time network
    98s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10-07-2024 23:51

General

  • Target

    8028a9c81bceb8acfa4443ac9c41d42dea3edfa617bf871730443d0c41d361c9.exe

  • Size

    588KB

  • MD5

    b60298888a31a783e5fbfcdbd2b87975

  • SHA1

    cd03277cafd52e5041763dea782e1e5d65aa6f61

  • SHA256

    8028a9c81bceb8acfa4443ac9c41d42dea3edfa617bf871730443d0c41d361c9

  • SHA512

    0fb956258eb6e8333424249e9cc61c9d31e4ebf8b5b277ded02c144a5a7a594f6f2fa0002a6218e9d13fdc09451c0cfd1ac97fa6d2de749ee917dfb7d55c3000

  • SSDEEP

    12288:txYLhzKMEivLyye381n1AO3h9xL5AF197gZHe:QhLE6Ly98x1AenAF1xKHe

Score
6/10

Malware Config

Signatures

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\8028a9c81bceb8acfa4443ac9c41d42dea3edfa617bf871730443d0c41d361c9.exe
    "C:\Users\Admin\AppData\Local\Temp\8028a9c81bceb8acfa4443ac9c41d42dea3edfa617bf871730443d0c41d361c9.exe"
    1⤵
    • Writes to the Master Boot Record (MBR)
    PID:4012

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4012-1-0x0000000002BE0000-0x0000000002CE0000-memory.dmp

    Filesize

    1024KB

  • memory/4012-2-0x0000000002B20000-0x0000000002B8B000-memory.dmp

    Filesize

    428KB

  • memory/4012-3-0x0000000000400000-0x000000000046F000-memory.dmp

    Filesize

    444KB

  • memory/4012-4-0x0000000000400000-0x000000000287B000-memory.dmp

    Filesize

    36.5MB

  • memory/4012-5-0x0000000000400000-0x000000000287B000-memory.dmp

    Filesize

    36.5MB

  • memory/4012-7-0x0000000002BE0000-0x0000000002CE0000-memory.dmp

    Filesize

    1024KB

  • memory/4012-8-0x0000000002B20000-0x0000000002B8B000-memory.dmp

    Filesize

    428KB

  • memory/4012-9-0x0000000000400000-0x000000000046F000-memory.dmp

    Filesize

    444KB