General
-
Target
VIRUSES.zip
-
Size
23KB
-
Sample
240616-hg9mqatbqb
-
MD5
be2f559b97278f40ddd255e0f494320a
-
SHA1
dc1a02c3dd29748e9d1a73549b6c6fd9af2e71e0
-
SHA256
764ad7142e6104dc3448bb6de639ae06164f1ce7095d248b64f1efe705d79cdf
-
SHA512
1c40bd726b70012947cabeb342e6041fcd7cff9a38627f563e0b8e56d91cd2eda8bc565d99d9821c1180c3155f03d32ed0f37e7797df34fa2eac84492f925dba
-
SSDEEP
384:D0z8nz9zAiGfprKjuguQjv2Ccfezb2mlnUJiZjWrg9tcxxIwtqizpW4QMWO0mw3c:D0YzBAiGhrKjughjaezpnPgPI8WOnw3c
Static task
static1
Behavioral task
behavioral1
Sample
MEMZ 4.0 Clean/MEMZ-Clean.bat
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
MEMZ 4.0 Clean/MEMZ-Clean.bat
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
MEMZ 4.0 Clean/MEMZ-Clean.exe
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
MEMZ 4.0 Clean/MEMZ-Clean.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
MEMZ 4.0 Clean/MEMZ.exe
Resource
win7-20240220-en
Behavioral task
behavioral6
Sample
MEMZ 4.0 Clean/MEMZ.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
MEMZ 4.0 Clean/MEMZ-Clean.bat
-
Size
9KB
-
MD5
bbae81b88416d8fba76dd3145a831d19
-
SHA1
42fa0e1b90ad49f66d4ab96c8cca02f81248da8b
-
SHA256
5c3fde60c178ed0306dd3e396032acdc9bc55c690e27a926923dd18238bbd64c
-
SHA512
f03ac63bbb504cb53dc896c2bec8666257034b1c4a5827a4ad75c434af05f1cd631a814cc8689e60210e4ca757e61390db8d222f05bf9f3a0fa7026bdf8c4368
-
SSDEEP
192:XBOTDzoOgdlf7MAdTyQuHq2b1vXei2SLca5icrLJlz3:ss/tDyQuHZddL5Jlz3
Score7/10-
Executes dropped EXE
-
-
-
Target
MEMZ 4.0 Clean/MEMZ-Clean.exe
-
Size
12KB
-
MD5
9c642c5b111ee85a6bccffc7af896a51
-
SHA1
eca8571b994fd40e2018f48c214fab6472a98bab
-
SHA256
4bbf7589615ebdb6c769d6d2e7bdcb26072bac0cda6e225a4133ba8819e688d5
-
SHA512
23cc74b5a7bdf70ba789d1730a0009414cfb9c780544e3d8d841be58782b9a9a089969c4295a0da25d07285505992386486d6ff0524e75605b96bb99cd3aaa1c
-
SSDEEP
192:BCMfc/GinpRBueYDw4+kEeN4FRrfMFFp3+f2dvGhT59uay:AMfceinpOeRENYhfOj+eGdKa
Score1/10 -
-
-
Target
MEMZ 4.0 Clean/MEMZ.exe
-
Size
16KB
-
MD5
1d5ad9c8d3fee874d0feb8bfac220a11
-
SHA1
ca6d3f7e6c784155f664a9179ca64e4034df9595
-
SHA256
3872c12d31fc9825e8661ac01ecee2572460677afbc7093f920a8436a42e28ff
-
SHA512
c8246f4137416be33b6d1ac89f2428b7c44d9376ac8489a9fbf65ef128a6c53fb50479e1e400c8e201c8611992ab1d6c1bd3d6cece89013edb4d35cdd22305b1
-
SSDEEP
192:M2WgyvSW8gRc6olcIEiwqZKBkDFR43xWTM3LHf26gFrcx3sNq:JWgnSmFlcIqq3agmLH+6gF23sN
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Drops file in System32 directory
-