dae968f47476ef79b122e771ccd0a2bacde2ac3535f68047239682fefa3dfe50 | Triage™

Login
Reports

Overview

overview

7

Static

static

1

MEMZ.bat

windows10-1703-x64

7

MEMZ.bat

windows7-x64

7

MEMZ.bat

windows10-2004-x64

7

MEMZ.bat

windows11-21h2-x64

7

MEMZ.bat

android-10-x64

MEMZ.bat

android-11-x64

MEMZ.bat

android-13-x64

MEMZ.bat

android-9-x86

MEMZ.bat

macos-10.15-amd64

4

MEMZ.bat

debian-12-armhf

MEMZ.bat

debian-12-mipsel

MEMZ.bat

debian-9-armhf

MEMZ.bat

debian-9-mips

MEMZ.bat

debian-9-mipsel

MEMZ.bat

ubuntu-18.04-amd64

MEMZ.bat

ubuntu-20.04-amd64

Sharing

Copy URL Twitter E-mail

General

Target
MEMZ.bat
Size 13KB
Sample240508-xxrt6sdd32
SHA256 dae968f47476ef79b122e771ccd0a2bacde2ac3535f68047239682fefa3dfe50
MD5 63c6ec6b042bcb00d2d832c0e4f25dca
SHA1 a904a7c3fc89ff497e91384a63db3282e00d31ce
SHA512 1454cd79a59f0603ae083abb7f3b1438e18c7858ab04dfc3df1a725cee72be48274c289d5c0a44ce415f4bdf8a2c316312453862381fdbf0f4af97a62234e41a
SSDEEP 192:E7N3ODNPiwc205VjF+Ijytxd+7yxpVtLoTKihWn5hhHxGtHfzf+H/0Nz6hcbXR:E85qwc35O1+7y/LphxxGtHAhubXR
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

android bootkit evasion execution linux macos persistence

Static task

static1

Behavioral task

behavioral1

Sample

MEMZ.bat

Resource

win10-20240404-en

windows10-1703-x64

14 signatures

60 seconds

bootkit execution persistence

Behavioral task

behavioral2

Sample

MEMZ.bat

Resource

win7-20240508-en

windows7-x64

13 signatures

60 seconds

bootkit execution persistence

Behavioral task

behavioral3

Sample

MEMZ.bat

Resource

win10v2004-20240508-en

windows10-2004-x64

8 signatures

60 seconds

bootkit execution persistence

Behavioral task

behavioral4

Sample

MEMZ.bat

Resource

win11-20240419-en

windows11-21h2-x64

11 signatures

60 seconds

bootkit execution persistence

Behavioral task

behavioral5

Sample

MEMZ.bat

Resource

android-x64-20240506-en

android-10-x64

0 signatures

60 seconds

Behavioral task

behavioral6

Sample

MEMZ.bat

Resource

android-x64-arm64-20240506-en

android-11-x64

0 signatures

60 seconds

Behavioral task

behavioral7

Sample

MEMZ.bat

Resource

android-33-x64-arm64-20240508.1-en

android-13-x64

0 signatures

60 seconds

Behavioral task

behavioral8

Sample

MEMZ.bat

Resource

android-x86-arm-20240506-en

android-9-x86

0 signatures

60 seconds

Behavioral task

behavioral9

Sample

MEMZ.bat

Resource

macos-20240410-en

macos-10.15-amd64

1 signatures

60 seconds

Behavioral task

behavioral10

Sample

MEMZ.bat

Resource

debian12-armhf-20240221-en

debian-12-armhf

0 signatures

60 seconds

Behavioral task

behavioral11

Sample

MEMZ.bat

Resource

debian12-mipsel-20240418-en

debian-12-mipsel

0 signatures

60 seconds

Behavioral task

behavioral12

Sample

MEMZ.bat

Resource

debian9-armhf-20240418-en

debian-9-armhf

0 signatures

60 seconds

Behavioral task

behavioral13

Sample

MEMZ.bat

Resource

debian9-mipsbe-20240226-en

debian-9-mips

0 signatures

60 seconds

Behavioral task

behavioral14

Sample

MEMZ.bat

Resource

debian9-mipsel-20240418-en

debian-9-mipsel

0 signatures

60 seconds

Behavioral task

behavioral15

Sample

MEMZ.bat

Resource

ubuntu1804-amd64-20240508-en

ubuntu-18.04-amd64

0 signatures

60 seconds

Behavioral task

behavioral16

Sample

MEMZ.bat

Resource

ubuntu2004-amd64-20240508-en

ubuntu-20.04-amd64

0 signatures

60 seconds

Malware Config

Targets

- Target
  MEMZ.bat
- Size 13KB
- SHA256 dae968f47476ef79b122e771ccd0a2bacde2ac3535f68047239682fefa3dfe50
- MD5 63c6ec6b042bcb00d2d832c0e4f25dca
- SHA1 a904a7c3fc89ff497e91384a63db3282e00d31ce
- SHA512 1454cd79a59f0603ae083abb7f3b1438e18c7858ab04dfc3df1a725cee72be48274c289d5c0a44ce415f4bdf8a2c316312453862381fdbf0f4af97a62234e41a
- SSDEEP 192:E7N3ODNPiwc205VjF+Ijytxd+7yxpVtLoTKihWn5hhHxGtHfzf+H/0Nz6hcbXR:E85qwc35O1+7y/LphxxGtHAhubXR
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

bootkit execution persistence evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral10 behavioral11 behavioral12 behavioral13 behavioral14 behavioral15 behavioral16 behavioral2 behavioral3 behavioral4 behavioral5 behavioral6 behavioral7 behavioral8 behavioral9

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Pre-OS Boot

Bootkit

Privilege Escalation

Defense Evasion

Hide Artifacts

Resource Forking

Modify Registry

Pre-OS Boot

Bootkit

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitexecutionpersistence

behavioral2

bootkitexecutionpersistence

behavioral3

bootkitexecutionpersistence

behavioral4

bootkitexecutionpersistence

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

© 2018-2026

Terms | Privacy