Analysis

  • max time kernel
    111s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    23-11-2024 21:18

General

  • Target

    f77f31fb6cf76723c4b9c60b678db8486d29f8c25f453626c7a6670450f1b71f.exe

  • Size

    583KB

  • MD5

    60488384ef6ba5611c3cdadddf0de5d5

  • SHA1

    56613c9eb6ca6b50148abff8cd0d3c05d40fa9bb

  • SHA256

    f77f31fb6cf76723c4b9c60b678db8486d29f8c25f453626c7a6670450f1b71f

  • SHA512

    2e7c089b128fad41ce83630083982d79628b60264093b8857c8d4e9eb8e41a09a48beca981a05110ae424b8394284436c4baa810afd4ff0e58db0ce814a63a2b

  • SSDEEP

    12288:HkXPZtAVidrYyxJ3fgQBPX/X9/kbDrPxD9:H8hXvfgQBP/Xhkb/Pv

Score
6/10

Malware Config

Signatures

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\f77f31fb6cf76723c4b9c60b678db8486d29f8c25f453626c7a6670450f1b71f.exe
    "C:\Users\Admin\AppData\Local\Temp\f77f31fb6cf76723c4b9c60b678db8486d29f8c25f453626c7a6670450f1b71f.exe"
    1⤵
    • Writes to the Master Boot Record (MBR)
    PID:2880

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2880-0-0x00000000002A0000-0x0000000000300000-memory.dmp

    Filesize

    384KB

  • memory/2880-1-0x0000000000370000-0x00000000003DB000-memory.dmp

    Filesize

    428KB

  • memory/2880-2-0x0000000000400000-0x000000000046F000-memory.dmp

    Filesize

    444KB

  • memory/2880-3-0x0000000000400000-0x0000000002F58000-memory.dmp

    Filesize

    43.3MB

  • memory/2880-5-0x00000000002A0000-0x0000000000300000-memory.dmp

    Filesize

    384KB

  • memory/2880-4-0x0000000000400000-0x0000000002F58000-memory.dmp

    Filesize

    43.3MB

  • memory/2880-6-0x0000000000370000-0x00000000003DB000-memory.dmp

    Filesize

    428KB

  • memory/2880-7-0x0000000000400000-0x000000000046F000-memory.dmp

    Filesize

    444KB