General
- Target MasonChess.zip
- Size 348KB
- Sample260416-3dphlafw2x
- SHA256 5f25b743517b2fdd02568b9dbd72c0e30a116c0e56747d2f04d5eda503e86227
- MD5 d4b08c7623124f880504128fa4f65b97
- SHA1 194ca4ccb21035bc6715462e5ad5604dd24371da
- SHA512 4a360e6f1423ac70992065d6bb25859bc11e714fa7967f35dc68f0dd2fd179824df8d0aedd69e04cc182d09186d39e363df0b52d0cc49d563b22bbe092e32658
- SSDEEP 6144:wz9kKVz0huhCMA1OsWBQfynhydPlxOB++xrX6sEiaaZFx1BxddddsCRUuwwy:gjlZhCM3jQahyd9cpF6sb3x1oE/U
- TLSH T1727423A2E317E1FF2CA142A3C36592A4958BC9185D1B2C0F450173D71E3E91BAEC9F36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
MasonChess.exe
Resource
win10ltsc2021-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target MasonChess.exe
- Size 1.3MB
- SHA256 9be0c047cea06ab24bdb1711ca7d4608e179826d079206ed36a1aea830cc5149
- MD5 10956f1eceb4c919805661a5bf59bbe9
- SHA1 51bda4e573711789db96a1755563246e39623af3
- SHA512 001b6eb588a6ac9d41abfe1a7fe001734fc9edb9db0502564532e029f1c30bf317261f63634527deb37ea9e1bb064818c57ec0a94194b23e4a6159039b02514d
- SSDEEP 24576:gfCzYx3PgYWwocek/r2+AAYNh3tBULAkS7LeS:gfCkoA/qhlL3rmzS7
- TLSH T1A455C622A687D993C40E1270DDD7D32977B2E0B46B368B87BA4C9BEF7D213A11CC5146
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.