General
- Target chomik.exe
- Size 163KB
- Sample260605-fx2wpsbs4v
- SHA256 b64d7d71d7d5c3a36e02e6814a87d8a7294c31bb1a7d07ded9d9b5d1e45676ef
- MD5 b4e4df37ca6c83bc8a0399a3958852fc
- SHA1 c9ca6ab3d5166645a2e137d3bb9eaa010bc5eddc
- SHA512 9146af40b358c4adf7dce461dea7befef77cf8009259ade38a0be18fb2c3bb72f1257669b6446c0708f5d361a0396fe9e68f956df96226ae5999669348d9f57d
- SSDEEP 3072:l7LW6Pr46prwG2k5GlI1JWE9QVsxyvJyn4NTfQf1VZlKWhrB3u+7:lXWJ5kICW3Jyn4if1VZsiB3u
- TLSH T161F33A0672A801ECE17BE73889521905F7777C264736E3CF1350A57A0FBAAD0AE7A711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
chomik.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
chomik.exe
Resource
win11-20260513-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target chomik.exe
- Size 163KB
- SHA256 b64d7d71d7d5c3a36e02e6814a87d8a7294c31bb1a7d07ded9d9b5d1e45676ef
- MD5 b4e4df37ca6c83bc8a0399a3958852fc
- SHA1 c9ca6ab3d5166645a2e137d3bb9eaa010bc5eddc
- SHA512 9146af40b358c4adf7dce461dea7befef77cf8009259ade38a0be18fb2c3bb72f1257669b6446c0708f5d361a0396fe9e68f956df96226ae5999669348d9f57d
- SSDEEP 3072:l7LW6Pr46prwG2k5GlI1JWE9QVsxyvJyn4NTfQf1VZlKWhrB3u+7:lXWJ5kICW3Jyn4if1VZsiB3u
- TLSH T161F33A0672A801ECE17BE73889521905F7777C264736E3CF1350A57A0FBAAD0AE7A711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Disables RegEdit via registry modification
Disables Task Manager via registry modification
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.