Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
28/03/2025, 04:13
General
-
Target
0cc6b6fc586e76a6c22f4add74af91080a952f00e767242f698f7c38b4846a18.exe
-
Size
2.9MB
-
MD5
b9e847658a2b0d56d9de0ad547bde645
-
SHA1
cddcf2c6fec93db9e26add005e17d1901ac2c304
-
SHA256
0cc6b6fc586e76a6c22f4add74af91080a952f00e767242f698f7c38b4846a18
-
SHA512
4517349ce584027c39ec6ca1db449b7130b80c129229be120287a21686a97a10b9edeffc3d266c2c46939227495ed0545e5150c498ed0ddf443e4c17e1c0a4e5
-
SSDEEP
49152:2GfcPi2jk/0r7K6yEeEtgawmVvPtht9bmG9EOLTqmThW4UfTXtLY4iGba6qrAbZw:2whQ7JgawqvPthS5ZOmr9sjGb
Score
6/10
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\0cc6b6fc586e76a6c22f4add74af91080a952f00e767242f698f7c38b4846a18.exe"C:\Users\Admin\AppData\Local\Temp\0cc6b6fc586e76a6c22f4add74af91080a952f00e767242f698f7c38b4846a18.exe"1⤵
- Writes to the Master Boot Record (MBR)
- System Location Discovery: System Language Discovery