General
- Target Qwen_python_20260708_kf1b3ha86.py
- Size 8KB
- Sample260708-222mdsat6q
- SHA256 103fbed2a4251be2765afb28e665c98c7886eca51e4b52357cd96a464ec7961d
Score
10/10
Malware Config
Targets
-
- Target Qwen_python_20260708_kf1b3ha86.py
- Size 8KB
- SHA256 103fbed2a4251be2765afb28e665c98c7886eca51e4b52357cd96a464ec7961d
Score10/10-
Detects KillMBR
-
Family: KillMBR
KillMBR is a trojan that attempts to overwrite the Master Boot Record.
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Drops desktop.ini file(s)
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Drops file in System32 directory