Analysis
- user interaction
yes - max time kernel
148s - max time network
141s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
- submitted
02/10/2026, 17:14
General
- Target rrrrr.exe
- Size 2.3MB
- Sample261002-vsd2easx6k
- SHA256 6d348a34f5a64d9d8efd60a3b370b76a3a3dacef069b722775bf4dce0d2ee576
Malware Config
Signatures
- Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
Processes
-
C:\Users\Admin\AppData\Local\Temp\rrrrr.exe"C:\Users\Admin\AppData\Local\Temp\rrrrr.exe"1⤵
- Writes to the Master Boot Record (MBR)
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x324 0x2f81⤵
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4860-0-0x000001B1068F0000-0x000001B106B3E000-memory.dmp
memory/4860-1-0x000001B106EE0000-0x000001B106EF0000-memory.dmp
memory/4860-2-0x000001B106EE0000-0x000001B106EF0000-memory.dmp
memory/4860-3-0x000001B106EE0000-0x000001B106EF0000-memory.dmp
memory/4860-4-0x000001B121080000-0x000001B121229000-memory.dmp
memory/4860-5-0x000001B106EE0000-0x000001B106EF0000-memory.dmp
memory/4860-6-0x000001B121080000-0x000001B121229000-memory.dmp
memory/4860-7-0x000001B121080000-0x000001B121229000-memory.dmp
memory/4860-8-0x000001B121080000-0x000001B121229000-memory.dmp
memory/4860-9-0x000001B121080000-0x000001B121229000-memory.dmp
memory/4860-10-0x000001B121080000-0x000001B121229000-memory.dmp
memory/4860-11-0x000001B121080000-0x000001B121229000-memory.dmp
memory/4860-12-0x000001B121080000-0x000001B121229000-memory.dmp
memory/4860-13-0x000001B121080000-0x000001B121229000-memory.dmp
memory/4860-14-0x000001B121080000-0x000001B121229000-memory.dmp
memory/4860-15-0x000001B121080000-0x000001B121229000-memory.dmp
memory/4860-16-0x000001B121080000-0x000001B121229000-memory.dmp
memory/4860-17-0x000001B121080000-0x000001B121229000-memory.dmp
memory/4860-18-0x000001B121080000-0x000001B121229000-memory.dmp