Analysis
-
max time kernel
106s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20250314-en -
resource tags
-
submitted
28/03/2025, 04:15
General
-
Target
4d568f672f1f80495ec4143568ea5f89e8c01875e5ed9bbfdd32a73cd4838244.exe
-
Size
2.7MB
-
MD5
ff3ce41383495208492b8f42985cce3f
-
SHA1
e689b804ecf34092cbb4e3cde3450c73c5875e54
-
SHA256
4d568f672f1f80495ec4143568ea5f89e8c01875e5ed9bbfdd32a73cd4838244
-
SHA512
c1ed0c93e90744cf3e9dfad7993c3a51163fbe1dc0dc06c13ec50c2743e31d9963f28bc12c778d41b12d97e1bfe98f452f7c0f661cff33535bd92e33ed863290
-
SSDEEP
49152:i+3GXB6qFrciGI4wLwTC8CtXa2w8uiHvGWbm3mjaD28rzrvfmurF9s2:i8oRrVLw7CtXawn83m624H3
Score
6/10
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\4d568f672f1f80495ec4143568ea5f89e8c01875e5ed9bbfdd32a73cd4838244.exe"C:\Users\Admin\AppData\Local\Temp\4d568f672f1f80495ec4143568ea5f89e8c01875e5ed9bbfdd32a73cd4838244.exe"1⤵
- Writes to the Master Boot Record (MBR)
- System Location Discovery: System Language Discovery