Analysis

  • max time kernel
    94s
  • max time network
    95s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13-07-2024 09:46

General

  • Target

    Gamestart.exe

  • Size

    1.6MB

  • MD5

    636403c0bab70c5e196d8ac598fb6d2f

  • SHA1

    1d4df6876fdc5d2b53d4a0f1cc50aca4a87bf28a

  • SHA256

    3f1110e1f78ff2f1a983ad893d3c7838da8048485d3af97e7d068433d0705359

  • SHA512

    b8f3b3d4f3b7d7f1c0675c9dc48790ef8005ffd9e7819b363651585f3fa4b12f4eadd4c616e8ff0f2b667d691cdf68baaced1e60e7589c4ab587b12083dfb8a6

  • SSDEEP

    24576:XgK5mTqk8oIWwHZSlioOKKhuwx0gPTvufUbZ1YOtLlqfUY/48jRT+JLlkESmiyCc:wzc1Lpuwx0mZGMEUY/48jRTqL2ESnW

Score
6/10

Malware Config

Signatures

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\Gamestart.exe
    "C:\Users\Admin\AppData\Local\Temp\Gamestart.exe"
    1⤵
    • Writes to the Master Boot Record (MBR)
    PID:4080

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads