Analysis

  • max time kernel
    121s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    31/10/2024, 14:10

General

  • Target

    31b3cbb953ab730cb7e6fc881ab79dd41f97a9536090d1eeee378d16cee43d54.exe

  • Size

    247KB

  • MD5

    aeb99d5291a81e2f32946e94c3e034a4

  • SHA1

    33abe5e659a9c34949cac251a23e409d576dcb48

  • SHA256

    31b3cbb953ab730cb7e6fc881ab79dd41f97a9536090d1eeee378d16cee43d54

  • SHA512

    ad36f64ee5aad63e962e5d2f1ec5b445c516b5d8388c20bcc43bce023eab089f6d42f5eb092cd700b9b0d360202174f8cbc71a1a17d238adc97359a91573937e

  • SSDEEP

    3072:g2RaiKg4xmUh1WXHqw/l+qmOELhakVsm3mxB32tLEv8zfdn5f2dZLCozOhhSn+TG:g0KgGwHqwOOELha+sm2D2+Uhngu7eHV

Malware Config

Signatures

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\31b3cbb953ab730cb7e6fc881ab79dd41f97a9536090d1eeee378d16cee43d54.exe
    "C:\Users\Admin\AppData\Local\Temp\31b3cbb953ab730cb7e6fc881ab79dd41f97a9536090d1eeee378d16cee43d54.exe"
    1⤵
    • Writes to the Master Boot Record (MBR)
    • System Location Discovery: System Language Discovery
    PID:804

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads