General
-
Target
Bombermania.exe
-
Size
2.7MB
-
Sample
230324-yle7nsha46
-
MD5
471d39a51a79f342033c5b0636c244dc
-
SHA1
b0324ddd99677d9b0458c7328879f8fde268effc
-
SHA256
1154535130d546eaa33bbc9051a9cb91e2b0e3a3991286c3d5b0a708110c9aa7
-
SHA512
e1df6f0c06a0438d7b1cabae01d38e9bb723feeff67b4a9c8176d46b4da7fbd89be287ff86db9617c02a553d1a7c76c7f5ad1286d12023ad7628f5b0a30066af
-
SSDEEP
49152:F0Mnrnb04mvy6e4LzKCGilG4mvEsWI9ep0dZfyFhVWHRal0v:KMnn04mY6yilGd19cyhxq0v
Behavioral task
behavioral1
Sample
Bombermania.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Bombermania.exe
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
Bombermania.exe
-
Size
2.7MB
-
MD5
471d39a51a79f342033c5b0636c244dc
-
SHA1
b0324ddd99677d9b0458c7328879f8fde268effc
-
SHA256
1154535130d546eaa33bbc9051a9cb91e2b0e3a3991286c3d5b0a708110c9aa7
-
SHA512
e1df6f0c06a0438d7b1cabae01d38e9bb723feeff67b4a9c8176d46b4da7fbd89be287ff86db9617c02a553d1a7c76c7f5ad1286d12023ad7628f5b0a30066af
-
SSDEEP
49152:F0Mnrnb04mvy6e4LzKCGilG4mvEsWI9ep0dZfyFhVWHRal0v:KMnn04mY6yilGd19cyhxq0v
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-