General
- Target Spoofed(check).exe
- Size 133.6MB
- Sample260731-de62labf58
- SHA256 8c7e1388749c946ac7773d1186cfa1a0002e7b4e622668c6bdf43e2ab9cb51b8
- MD5 008cd06b13b4769d555c27a74ea722ec
- SHA1 51e6e1905afad563006b019d44f6c2d7a67de99c
- SHA512 11fe84d9e74fa8ef1268c82f1c8ae9a1b9e70e0e8b4fb6fa7dc5156199fd5e58795b614e2056cf7b37df7188e99449d22b72bef7105b850e1db956ca464a5727
- SSDEEP 786432:iGPtcsFd+U4DVOK33ZiSOH0q4DlpFcz7yy6QbmZ/iqF9YnR9X6KPu/ix7KDZ:iI7FdX0Zi0ySybbmZ3qnR9X6KPuemd
- TLSH T1F768AE14A3E80715E27F82BCD6639212E6B1B8531361D2CF0499DA4D3FA3BD19A36377
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Spoofed(check).exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Spoofed(check).exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target Spoofed(check).exe
- Size 133.6MB
- SHA256 8c7e1388749c946ac7773d1186cfa1a0002e7b4e622668c6bdf43e2ab9cb51b8
- MD5 008cd06b13b4769d555c27a74ea722ec
- SHA1 51e6e1905afad563006b019d44f6c2d7a67de99c
- SHA512 11fe84d9e74fa8ef1268c82f1c8ae9a1b9e70e0e8b4fb6fa7dc5156199fd5e58795b614e2056cf7b37df7188e99449d22b72bef7105b850e1db956ca464a5727
- SSDEEP 786432:iGPtcsFd+U4DVOK33ZiSOH0q4DlpFcz7yy6QbmZ/iqF9YnR9X6KPu/ix7KDZ:iI7FdX0Zi0ySybbmZ3qnR9X6KPuemd
- TLSH T1F768AE14A3E80715E27F82BCD6639212E6B1B8531361D2CF0499DA4D3FA3BD19A36377
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.