General
- Target memz.by.iTzDrK_.rar
- Size 17KB
- Sample240525-trfyyaac4v
- SHA256 3d5d9bc94be3d1b7566a652155b0b37006583868311f20ef00283c30314b5c61
Score
7/10
Malware Config
Targets
-
- Target Geometry dash auto speedhack.bat
- Size 13KB
- SHA256 5e2cd213ff47b7657abd9167c38ffd8b53c13261fe22adddea92b5a2d9e320ad
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
Drops file in System32 directory
-
- Target geometry dash auto speedhack.exe
- Size 14KB
- SHA256 a3d5715a81f2fbeb5f76c88c9c21eeee87142909716472f911ff6950c790c24d
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.