General
-
Target
VIRUSES.zip
-
Size
23KB
-
Sample
240616-hhqw1atbrg
-
MD5
be2f559b97278f40ddd255e0f494320a
-
SHA1
dc1a02c3dd29748e9d1a73549b6c6fd9af2e71e0
-
SHA256
764ad7142e6104dc3448bb6de639ae06164f1ce7095d248b64f1efe705d79cdf
-
SHA512
1c40bd726b70012947cabeb342e6041fcd7cff9a38627f563e0b8e56d91cd2eda8bc565d99d9821c1180c3155f03d32ed0f37e7797df34fa2eac84492f925dba
-
SSDEEP
384:D0z8nz9zAiGfprKjuguQjv2Ccfezb2mlnUJiZjWrg9tcxxIwtqizpW4QMWO0mw3c:D0YzBAiGhrKjughjaezpnPgPI8WOnw3c
Static task
static1
Behavioral task
behavioral1
Sample
MEMZ 4.0 Clean/MEMZ.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
MEMZ 4.0 Clean/MEMZ.exe
Resource
win10v2004-20240611-en
Malware Config
Targets
-
-
Target
MEMZ 4.0 Clean/MEMZ.exe
-
Size
16KB
-
MD5
1d5ad9c8d3fee874d0feb8bfac220a11
-
SHA1
ca6d3f7e6c784155f664a9179ca64e4034df9595
-
SHA256
3872c12d31fc9825e8661ac01ecee2572460677afbc7093f920a8436a42e28ff
-
SHA512
c8246f4137416be33b6d1ac89f2428b7c44d9376ac8489a9fbf65ef128a6c53fb50479e1e400c8e201c8611992ab1d6c1bd3d6cece89013edb4d35cdd22305b1
-
SSDEEP
192:M2WgyvSW8gRc6olcIEiwqZKBkDFR43xWTM3LHf26gFrcx3sNq:JWgnSmFlcIqq3agmLH+6gF23sN
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Drops file in System32 directory
-