General
- Target wps_office_inst.exe
- Size 5.2MB
- Sample260718-pecnjaet41
- SHA256 62ed05b4126bdd013ff2921f63091c3ccf1d4b379558963a43317a253af07337
- MD5 6c55be909a8e4f3aa20d36f50c4fd41b
- SHA1 c85e3b23dae2ec2430fe57a524e4a7a79a5683f2
- SHA512 af0c2f6b538cf5bbc7dbd3e158713600180ea4734f38a0ade7db4e42497143f7c4ce83dd690504a03d95bdad048326218e7c547bba059411b615d0d18ae8e47c
- SSDEEP 98304:c9inBWTjP9RaZNn4Qb6EUkdjooM41i8pJsJZ/i:HojCm417pJMRi
- TLSH T1F346B001F685C5B1F5A101B0287AEB7A983DBE28473084D7A7D11E2A89316D37A37F5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
wps_office_inst.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
wps_office_inst.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target wps_office_inst.exe
- Size 5.2MB
- SHA256 62ed05b4126bdd013ff2921f63091c3ccf1d4b379558963a43317a253af07337
- MD5 6c55be909a8e4f3aa20d36f50c4fd41b
- SHA1 c85e3b23dae2ec2430fe57a524e4a7a79a5683f2
- SHA512 af0c2f6b538cf5bbc7dbd3e158713600180ea4734f38a0ade7db4e42497143f7c4ce83dd690504a03d95bdad048326218e7c547bba059411b615d0d18ae8e47c
- SSDEEP 98304:c9inBWTjP9RaZNn4Qb6EUkdjooM41i8pJsJZ/i:HojCm417pJMRi
- TLSH T1F346B001F685C5B1F5A101B0287AEB7A983DBE28473084D7A7D11E2A89316D37A37F5F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.