Analysis
-
max time kernel
140s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
01-11-2024 07:56
Static task
static1
Behavioral task
behavioral1
Sample
37f7717758902951b507c7f5cfd5901e4d1fcd6e25218d1486e0a4cf7c1c4c42.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
37f7717758902951b507c7f5cfd5901e4d1fcd6e25218d1486e0a4cf7c1c4c42.exe
Resource
win10v2004-20241007-en
General
-
Target
37f7717758902951b507c7f5cfd5901e4d1fcd6e25218d1486e0a4cf7c1c4c42.exe
-
Size
552KB
-
MD5
e6c81f71d06d753dbce40f3f885bcc19
-
SHA1
5bc5d599e56a09f1b92a34394067240c5a506797
-
SHA256
37f7717758902951b507c7f5cfd5901e4d1fcd6e25218d1486e0a4cf7c1c4c42
-
SHA512
3a8b7c7fd4aff92e7e81e0911e924e9df2569e36991216e578c05ce4b42f63176f0020119382646f0bf7df8dc5257086480c17aca8948ccee807d6a3cb5f8fe3
-
SSDEEP
6144:AawN+H6sh6ybrVm44lnXOuGx+8749vFUdHl57wcGIGMrYt+5WbnJfA7KrypgTmoE:AsaI1mRnXOxp4SF1yy2+UyUytGOmTe
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
Processes:
37f7717758902951b507c7f5cfd5901e4d1fcd6e25218d1486e0a4cf7c1c4c42.exedescription ioc process File opened for modification \??\PHYSICALDRIVE0 37f7717758902951b507c7f5cfd5901e4d1fcd6e25218d1486e0a4cf7c1c4c42.exe