Analysis

  • max time kernel
    140s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    13-10-2024 06:50

General

  • Target

    5933db4a297cbade801e22b01ccc290b279dcc3f69adb7f6898cd5b914553b0e.exe

  • Size

    629KB

  • MD5

    9d987b63de67acf038bf01bbcc04b841

  • SHA1

    698ecd6246528661cc8c165f80ab1683f12a4a82

  • SHA256

    5933db4a297cbade801e22b01ccc290b279dcc3f69adb7f6898cd5b914553b0e

  • SHA512

    d7165f777f68bff6aab918efb364da97910729e0acc40d76f6c69e542ca463ad475c70a459e0b4e3928bd931f2c0c8e2c99c69bfd0a2bbc81dc53a2d0a1e8af7

  • SSDEEP

    12288:Iyrp+BMKJyLSGyFD3CRekI+vEe2DHdpEp42RIEmfvX3A:5rfMyLghSRe8v5u3Ee2ee

Score
6/10

Malware Config

Signatures

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\5933db4a297cbade801e22b01ccc290b279dcc3f69adb7f6898cd5b914553b0e.exe
    "C:\Users\Admin\AppData\Local\Temp\5933db4a297cbade801e22b01ccc290b279dcc3f69adb7f6898cd5b914553b0e.exe"
    1⤵
    • Writes to the Master Boot Record (MBR)
    PID:2036

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2036-1-0x0000000000630000-0x0000000000730000-memory.dmp

    Filesize

    1024KB

  • memory/2036-2-0x0000000000290000-0x00000000002FB000-memory.dmp

    Filesize

    428KB

  • memory/2036-3-0x0000000000400000-0x000000000046F000-memory.dmp

    Filesize

    444KB

  • memory/2036-4-0x0000000000400000-0x00000000004AC000-memory.dmp

    Filesize

    688KB

  • memory/2036-5-0x0000000000630000-0x0000000000730000-memory.dmp

    Filesize

    1024KB

  • memory/2036-6-0x0000000000290000-0x00000000002FB000-memory.dmp

    Filesize

    428KB

  • memory/2036-7-0x0000000000400000-0x00000000004AC000-memory.dmp

    Filesize

    688KB

  • memory/2036-8-0x0000000000400000-0x000000000046F000-memory.dmp

    Filesize

    444KB