Analysis
-
max time kernel
92s -
max time network
93s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
15/09/2024, 06:15
General
-
Target
d9aadd665af0abefb2b45e633a89f450N.exe
-
Size
1.1MB
-
MD5
d9aadd665af0abefb2b45e633a89f450
-
SHA1
a6696022314771b8c2b7947febc4d0a80ba58aa8
-
SHA256
f15f8e8bcd99f287bce76a0077a215f464b1c1ae2eed0af7b833ffeee4bd49e3
-
SHA512
2cddd3018a6564e217166f1af4ef92049dd3fba8d69cf8f53282893252fa759ebb78f0691c115db1941b8bc12b5d53d2eb841835bce11a1e99763321dd4cfa7a
-
SSDEEP
12288:H5jp9tYcRSOCQlbXgsqrzVT5U1i2rFE3AW97uSuTj9jKq7sV0F3:H51Yw+QFX3qfVT5U1iyF6uZ9f
Score
6/10
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Modifies Internet Explorer settings 1 TTPs 4 IoCs
-
Suspicious use of SetWindowsHookEx 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d9aadd665af0abefb2b45e633a89f450N.exe"C:\Users\Admin\AppData\Local\Temp\d9aadd665af0abefb2b45e633a89f450N.exe"1⤵
- Writes to the Master Boot Record (MBR)
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx