Resubmissions
05/08/2026, 22:34
260805-2hh1yaed27829/08/2025, 19:29
250829-x68jaaxwfs29/08/2025, 18:25
250829-w2tnwswwhy829/08/2025, 17:46
250829-wcfqqsgk5w824/05/2025, 16:10
250524-tmdb9azjz5824/05/2025, 16:08
250524-tlfe8agl71824/05/2025, 13:02
250524-p9zfsayj13824/05/2025, 11:54
250524-n3a9yatzhz323/05/2025, 14:23
250523-rp7yjaxjs5823/05/2025, 12:21
250523-pjphwswmt88General
- Target Holzer.exe
- Size 135KB
- Sample250524-tlfe8agl71
- SHA256 cede0b15d88c20bc750b516858f8bf31ee472f6cbd01640840890736c4333cce
- MD5 c971c68b4e58ccc82802b21ae8488bc7
- SHA1 7305f3a0a0a0d489e0bcf664353289f61556de77
- SHA512 ff199691c35f2748772410bf454e8b76dd67d892dd76fc87d20b3bbe6c145c6af1685344de636326692df792f55d0fba9a0025a7cf491d0b4e73ff45c3b039d7
- SSDEEP 3072:2EYGNIaWY/0kTKxIJXtJ0YCHiQtSetFITTTTTHvvvvvNKB:HN5TKvr9PuKB
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Holzer.exe
Resource
win10ltsc2021-20250425-en
1 signatures
60 seconds
Behavioral task
behavioral2
Sample
Holzer.exe
Resource
win11-20250502-en
14 signatures
60 seconds
Malware Config
Targets
-
- Target Holzer.exe
- Size 135KB
- SHA256 cede0b15d88c20bc750b516858f8bf31ee472f6cbd01640840890736c4333cce
- MD5 c971c68b4e58ccc82802b21ae8488bc7
- SHA1 7305f3a0a0a0d489e0bcf664353289f61556de77
- SHA512 ff199691c35f2748772410bf454e8b76dd67d892dd76fc87d20b3bbe6c145c6af1685344de636326692df792f55d0fba9a0025a7cf491d0b4e73ff45c3b039d7
- SSDEEP 3072:2EYGNIaWY/0kTKxIJXtJ0YCHiQtSetFITTTTTHvvvvvNKB:HN5TKvr9PuKB
- MD5 SHA1 SHA512 SSDEEP
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
MITRE ATT&CK Enterprise v16
Persistence
Event Triggered Execution
1Accessibility Features
1Pre-OS Boot
1Bootkit
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Pre-OS Boot
1Bootkit
1