General
- Target ALrH2bBByHH.rar
- Size 3.8MB
- Sample260714-ph8kdaev8s
- SHA256 a8cfeb1cb3cf0278093fb09d79453c77d8ffd51617a638e7b52f4271bb66d388
- MD5 5f5fd124443d36c70429398637659a99
- SHA1 0f9fa642d1363ab0d35d22b80d7477239289ccc3
- SHA512 21c87561b6d6f8b56a5d5c01420dae3bad4d6003bb1bad3ef70937ffadf911343856b63a4b686de03e8ddffabbdcbdbab0d0eb59eb8fd256e6b2234830555054
- SSDEEP 98304:7Cbf+O6uRzii662Qd7uYTIMht5xLwksUMAKe8Ravfbcx4Xm:7EfKKzii6907uYTIMht5hwksUM5HR+fu
- TLSH T105063310970C1F7AC87A6352CC52A5224707229C9B4AE8B794EBFDDD5B15FB824B7B0C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ALrH2bBByHH.rar
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
ALrH2bBByHH.rar
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target ALrH2bBByHH.rar
- Size 3.8MB
- SHA256 a8cfeb1cb3cf0278093fb09d79453c77d8ffd51617a638e7b52f4271bb66d388
- MD5 5f5fd124443d36c70429398637659a99
- SHA1 0f9fa642d1363ab0d35d22b80d7477239289ccc3
- SHA512 21c87561b6d6f8b56a5d5c01420dae3bad4d6003bb1bad3ef70937ffadf911343856b63a4b686de03e8ddffabbdcbdbab0d0eb59eb8fd256e6b2234830555054
- SSDEEP 98304:7Cbf+O6uRzii662Qd7uYTIMht5xLwksUMAKe8Ravfbcx4Xm:7EfKKzii6907uYTIMht5hwksUM5HR+fu
- TLSH T105063310970C1F7AC87A6352CC52A5224707229C9B4AE8B794EBFDDD5B15FB824B7B0C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Disables Task Manager via registry modification
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Drops file in System32 directory