Overview

overview

7

Static

static

MEMZ-master/MEMZ.exe

windows7_x64

6

MEMZ-master/MEMZ.exe

windows10-2004_x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e27df818e614ee02d5f78c909a1f0839ec96644c16284c553f22e1e9c2719b4d

  • Size

    9KB

  • Sample

    220520-fhxnfaagd6

  • MD5

    cdc16ed0871d6ef790d94eb87221d778

  • SHA1

    7412475b1214809809aaf71a8c7c96fa71620dec

  • SHA256

    e27df818e614ee02d5f78c909a1f0839ec96644c16284c553f22e1e9c2719b4d

  • SHA512

    f9de6ce5c2b6e7504625f6913fd4bd868b6eecfd1006cadeccc82577bd052831cd4104b4473b2b5d4b0f60a21f230ae85b165d71a313915b92636e52c8f9bbae

Score
7/10
bootkitpersistence

Malware Config

Targets

    • Target

      MEMZ-master/MEMZ.exe

    • Size

      16KB

    • MD5

      1d5ad9c8d3fee874d0feb8bfac220a11

    • SHA1

      ca6d3f7e6c784155f664a9179ca64e4034df9595

    • SHA256

      3872c12d31fc9825e8661ac01ecee2572460677afbc7093f920a8436a42e28ff

    • SHA512

      c8246f4137416be33b6d1ac89f2428b7c44d9376ac8489a9fbf65ef128a6c53fb50479e1e400c8e201c8611992ab1d6c1bd3d6cece89013edb4d35cdd22305b1

    Score
    7/10
    bootkitpersistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Bootkit

1
T1067

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks