Overview

overview

7

Static

static

3

0cc6b6fc58...18.exe

windows7-x64

6

0cc6b6fc58...18.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    105s
  • max time network
    145s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250314-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20250314-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/03/2025, 04:13

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    0cc6b6fc586e76a6c22f4add74af91080a952f00e767242f698f7c38b4846a18.exe

  • Size

    2.9MB

  • MD5

    b9e847658a2b0d56d9de0ad547bde645

  • SHA1

    cddcf2c6fec93db9e26add005e17d1901ac2c304

  • SHA256

    0cc6b6fc586e76a6c22f4add74af91080a952f00e767242f698f7c38b4846a18

  • SHA512

    4517349ce584027c39ec6ca1db449b7130b80c129229be120287a21686a97a10b9edeffc3d266c2c46939227495ed0545e5150c498ed0ddf443e4c17e1c0a4e5

  • SSDEEP

    49152:2GfcPi2jk/0r7K6yEeEtgawmVvPtht9bmG9EOLTqmThW4UfTXtLY4iGba6qrAbZw:2whQ7JgawqvPthS5ZOmr9sjGb

Score
7/10
bootkitdiscoverypersistence

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

    bootkitpersistence
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery

Processes

  • C:\Users\Admin\AppData\Local\Temp\0cc6b6fc586e76a6c22f4add74af91080a952f00e767242f698f7c38b4846a18.exe
    "C:\Users\Admin\AppData\Local\Temp\0cc6b6fc586e76a6c22f4add74af91080a952f00e767242f698f7c38b4846a18.exe"
    1⤵
    • Loads dropped DLL
    • Writes to the Master Boot Record (MBR)
    • System Location Discovery: System Language Discovery
    PID:5620

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\MicroGame\NetBridge.dll
    Filesize

    235KB

    MD5

    eb96f1feb20ecbbee65e57cfb1eb642d

    SHA1

    2d07cd916c420ebde5f0af30c50cde89ab826cf9

    SHA256

    302d516bac9fc21c6870bade3137e8556f890a43c6a3f5a06ecb4aeb2bc2686a

    SHA512

    dd983aea45edbf2c1ef64babb7551a70895d6524c5dfec7a50c87af3995844fd1fa2c97d38b3975b304af048ca24d561c53fbe422e8696e1611b5258cfb2b9b8

    Download Submit