b68dfbca704824677abc4e1ed9138de1cedc4a55348792cf7c79e05422b82dd2

Analysis

max time kernel
150s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
15/09/2026, 02:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
JVXB_Destructive.exe
Size 112KB
Sample260915-da8dvsbn8z
SHA256 b68dfbca704824677abc4e1ed9138de1cedc4a55348792cf7c79e05422b82dd2
MD5 161bed7f1311c6cd77e2dc2841f10689
SHA1 de9cec3de77f120678988561785b9301ae5e1150
SHA512 946e7d7d2190fb4b84c7be7064007893a36d082ca72e5b49552f55754bdce4549c48fb411b07c15db5ed4c6734843d16922bc1d2196c6c5b75b5a48504e11cb1
SSDEEP 1536:S6Lfhj2qgm0bE0s2OZxSUHlZWSNvufcHhzAvDkpDM+RzcjsWNLC4TdH9dldrotEe:SmUYmLUHlQYvZHh8IDfRKLVJnsEP01P
TLSH
T1FFB36C1B73F630F9E1B68278C8514A25EB76B87207609FAF07A402951F272D18D3EF61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

bootkit persistence

Malware Config

Signatures

Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

Bootkits write to the MBR to gain persistence at a level below the operating system.

bootkit persistence

Bootkit

T1542.003

description	ioc	Process
File opened for modification	\??\PhysicalDrive0	JVXB_Destructive.exe

C:\Users\Admin\AppData\Local\Temp\JVXB_Destructive.exe
"C:\Users\Admin\AppData\Local\Temp\JVXB_Destructive.exe"
1⤵
- Writes to the Master Boot Record (MBR)
PID:4820

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

T1542

Bootkit

T1542.003

Privilege Escalation

Defense Evasion

Pre-OS Boot

T1542

Bootkit

T1542.003

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads