Analysis
-
max time kernel
117s -
max time network
108s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
23-11-2024 22:00
General
-
Target
c0d03d0e971770f8edfee25f10c26eddc0e53d3525e7f1e4f96b0c8f04241314.exe
-
Size
5.4MB
-
MD5
dd98b518fea2e5ee3d647c58de77a965
-
SHA1
d645292b2c6d02ac715b7eb2496c8b38d205cd46
-
SHA256
c0d03d0e971770f8edfee25f10c26eddc0e53d3525e7f1e4f96b0c8f04241314
-
SHA512
39f574904e5e84846b3b7b97c54ea105c3b26e73b9b03ce03e79c1403b749536ed164ddd30b703160ce2ffc767206b497357547ae506e4566dc5575575ad81dd
-
SSDEEP
49152:TEY29Y/CdTDAUAif7Tp8fYejClDvN5++b+wr9sP7gINSGXjN5viey7ejWGo:4dl3AQnp8gi43+Sn9sT3LNXySCB
Score
6/10
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
-
System policy modification 1 TTPs 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c0d03d0e971770f8edfee25f10c26eddc0e53d3525e7f1e4f96b0c8f04241314.exe"C:\Users\Admin\AppData\Local\Temp\c0d03d0e971770f8edfee25f10c26eddc0e53d3525e7f1e4f96b0c8f04241314.exe"1⤵
- Writes to the Master Boot Record (MBR)
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
- System policy modification
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
5.4MB
-
Filesize
224KB
-
Filesize
5.6MB
-
Filesize
584KB
-
Filesize
7.7MB
-
Filesize
40KB
-
Filesize
7.7MB
-
Filesize
7.7MB
-
Filesize
7.7MB
-
Filesize
4KB
-
Filesize
7.7MB
-
Filesize
7.7MB