General
Target

e27df818e614ee02d5f78c909a1f0839ec96644c16284c553f22e1e9c2719b4d

Size

9KB

Sample

220520-fhxnfaagd6

Score
7/10
MD5

cdc16ed0871d6ef790d94eb87221d778

SHA1

7412475b1214809809aaf71a8c7c96fa71620dec

SHA256

e27df818e614ee02d5f78c909a1f0839ec96644c16284c553f22e1e9c2719b4d

SHA512

f9de6ce5c2b6e7504625f6913fd4bd868b6eecfd1006cadeccc82577bd052831cd4104b4473b2b5d4b0f60a21f230ae85b165d71a313915b92636e52c8f9bbae

Malware Config
Targets
Target

MEMZ-master/MEMZ.exe

MD5

1d5ad9c8d3fee874d0feb8bfac220a11

Filesize

16KB

Score
7/10
SHA1

ca6d3f7e6c784155f664a9179ca64e4034df9595

SHA256

3872c12d31fc9825e8661ac01ecee2572460677afbc7093f920a8436a42e28ff

SHA512

c8246f4137416be33b6d1ac89f2428b7c44d9376ac8489a9fbf65ef128a6c53fb50479e1e400c8e201c8611992ab1d6c1bd3d6cece89013edb4d35cdd22305b1

Tags

Signatures

  • Checks computer location settings

    Description

    Looks up country code configured in the registry, likely geofence.

    TTPs

    Query RegistrySystem Information Discovery
  • Writes to the Master Boot Record (MBR)

    Description

    Bootkits write to the MBR to gain persistence at a level below the operating system.

    Tags

    TTPs

    Bootkit

Related Tasks

MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
        Execution
          Exfiltration
            Impact
              Initial Access
                Lateral Movement
                  Persistence
                  Privilege Escalation
                    Tasks

                    static1

                    Score
                    N/A

                    behavioral1

                    Score
                    6/10

                    behavioral2

                    Score
                    7/10