Analysis
- max time kernel
148s - max time network
146s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
22/07/2026, 00:21
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Cs-dis.ru - Всё для Counter-Strike.url
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Cs-dis.ru - Всё для Counter-Strike.url
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
HACK_b.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
HACK_b.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
General
- Target HACK_b.exe
- Size 568KB
- Sample260722-anfdfswdkc
- SHA256 8c36d776ec6d33f11891f7126d1f06b3202da3d176b5a4dd6374ef9ec6a88f09
- MD5 ef85d86c3426f6248641861086e2d05a
- SHA1 637c9520502f8e786e17d69e5bd2dcd6291d3c92
- SHA512 51587f92fe3c95f741fa15e805f9959b043234e814ea73bdce131301d9c771aec0ef158dcd95bd1499c4c0fa88b4eeda7579249de17348816252a3854d1896a7
- SSDEEP 12288:7C1gweRqMzcaR4zCRh/eTaOVUwHO4XyvI9v:vw1p+4QBeTaOVZ9Xy
- TLSH T1FBC46D26B6E08437D16356759C1B86BCA826FE113E74A88B3BE51D0C7F39B81353B193
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
description ioc Process File opened for modification \??\PhysicalDrive0 HACK_b.exe - Drops file in System32 directory 1 IoCs
description ioc Process File created C:\Windows\SysWOW64\gloom.sys HACK_b.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language HACK_b.exe - Suspicious behavior: LoadsDriver 1 IoCs
pid Process 812 Process not Found