General
- Target PEEKABOO.COM
- Size 921KB
- Sample260428-sffclaey3m
- SHA256 deaf30953149d0bef45a11bd89f4ef69f77115e50380c7ef3607c37ff4f40a1d
- MD5 03c3e9290329eec39c6543006f9ac9f1
- SHA1 78e676fc850fb5d4e1c75b813f15b841fdf7705d
- SHA512 b2c5b1b060a0349bc92cc5a8b286f149b5cf6b40264e7b613b76c911e4acc6352ed0fdd9d945fae9c025963cae02f3f2cbef8a62bff844764a66481119c6321d
- SSDEEP 24576:QCFZOZHLhrN+f4SULfWyBPzB8JAk4cQATg:1F+LL+fIWybB8
- TLSH T13B15239832772A1FCCE72737E5E739A463AE323D0937229D04A5F37D1E415C05726AA2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
PEEKABOO.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
PEEKABOO.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target PEEKABOO.COM
- Size 921KB
- SHA256 deaf30953149d0bef45a11bd89f4ef69f77115e50380c7ef3607c37ff4f40a1d
- MD5 03c3e9290329eec39c6543006f9ac9f1
- SHA1 78e676fc850fb5d4e1c75b813f15b841fdf7705d
- SHA512 b2c5b1b060a0349bc92cc5a8b286f149b5cf6b40264e7b613b76c911e4acc6352ed0fdd9d945fae9c025963cae02f3f2cbef8a62bff844764a66481119c6321d
- SSDEEP 24576:QCFZOZHLhrN+f4SULfWyBPzB8JAk4cQATg:1F+LL+fIWybB8
- TLSH T13B15239832772A1FCCE72737E5E739A463AE323D0937229D04A5F37D1E415C05726AA2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Disables Task Manager via registry modification
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
Drops file in System32 directory