Analysis
-
max time kernel
140s -
max time network
143s -
platform
windows10-2004_x64 -
resource
win10v2004-20250314-en -
resource tags
-
submitted
28/03/2025, 16:30
General
-
Target
$TEMP/SeFastInstall3_3201.exe
-
Size
227KB
-
MD5
97a0b8d4d70e2358f67721496fd901de
-
SHA1
f5a39a0636dbe64cfbaa4f5888a620e2ef291bfe
-
SHA256
78b79361df52fbafd5503471094af6c21c9d998f53feb57d9cfcf64a8b54d7f8
-
SHA512
cfa66b29677ac35c20183e95322916591da1b519e3cf6e7767d2a264eb6b0b80829ae2a2d64eab3836e4c73589789702bfd6ad5157abe547d651e687d7200f79
-
SSDEEP
6144:SDez3bkqxR5/zpu9EKR7NutEdfUv95u9rn39Vk+K5d:SDcxRW93NldmkdLBK5d
Score
6/10
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
UPX packed file 14 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\$TEMP\SeFastInstall3_3201.exe"C:\Users\Admin\AppData\Local\Temp\$TEMP\SeFastInstall3_3201.exe"1⤵
- Writes to the Master Boot Record (MBR)
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
684KB
-
Filesize
684KB
-
Filesize
684KB
-
Filesize
684KB
-
Filesize
684KB
-
Filesize
684KB
-
Filesize
684KB
-
Filesize
684KB
-
Filesize
684KB
-
Filesize
684KB
-
Filesize
684KB
-
Filesize
684KB
-
Filesize
684KB
-
Filesize
684KB