d67f6099f902690077925315580b322cbd56044584e3deaefd5d2e6f49c0bcc9

Analysis

max time kernel
150s
max time network
135s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/07/2026, 17:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
d67f6099f902690077925315580b322cbd56044584e3deaefd5d2e6f49c0bcc9.exe
Size 3.7MB
Sample260722-v3sbsaaa64
SHA256 d67f6099f902690077925315580b322cbd56044584e3deaefd5d2e6f49c0bcc9
MD5 ea2bed472f656ec86a65027f2a59dd60
SHA1 48b178d45536521a1985f45c16399ca492ef0c2f
SHA512 95725e383305a3c9174863ca240c292f2236e1ea74b706ac22d2249cd50ecf95a7275b8757130e4e900fc9f4ce27216e3adba44971475a57ff78f7eecb74ec02
SSDEEP 49152:Db0y4Ct2lp7hEMVx9vRtW14aco2LTuEIcowoA5EUI88bFBeavBrPQzWHyc1EOTj7:ky4Ba2ZIc9cTBrozWHjiSjA8SRxeCE
TLSH
T14D06C066A2A811EED0B7D178DA479A07F671781647706FDB03A40A561F63FE01FBE380
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

bootkit persistence

Malware Config

Signatures

Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

Bootkits write to the MBR to gain persistence at a level below the operating system.

bootkit persistence

Bootkit

T1542.003

description	ioc	Process
File opened for modification	\??\PhysicalDrive0	d67f6099f902690077925315580b322cbd56044584e3deaefd5d2e6f49c0bcc9.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
5144	d67f6099f902690077925315580b322cbd56044584e3deaefd5d2e6f49c0bcc9.exe
5144	d67f6099f902690077925315580b322cbd56044584e3deaefd5d2e6f49c0bcc9.exe
5144	d67f6099f902690077925315580b322cbd56044584e3deaefd5d2e6f49c0bcc9.exe
5144	d67f6099f902690077925315580b322cbd56044584e3deaefd5d2e6f49c0bcc9.exe

C:\Users\Admin\AppData\Local\Temp\d67f6099f902690077925315580b322cbd56044584e3deaefd5d2e6f49c0bcc9.exe
"C:\Users\Admin\AppData\Local\Temp\d67f6099f902690077925315580b322cbd56044584e3deaefd5d2e6f49c0bcc9.exe"
1⤵
- Writes to the Master Boot Record (MBR)
- Suspicious behavior: EnumeratesProcesses
PID:5144

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

T1542

Bootkit

T1542.003

Privilege Escalation

Defense Evasion

Pre-OS Boot

T1542

Bootkit

T1542.003

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads