General
- Target afeeb2288aba5f3aa36840fe4b4e199714c141657c117e6c30f6260b3a2badef
- Size 5.5MB
- Sample260801-cqfhcacb35
- SHA256 afeeb2288aba5f3aa36840fe4b4e199714c141657c117e6c30f6260b3a2badef
- MD5 ba6b9abddc5aba44f8461b3c0ccd0da5
- SHA1 c41c512bea1821028e41c4e5a8349e9fe5f4a786
- SHA512 5b726775c0e4c348b8485d3a7997d3627b0a470bef3814052c788481515b9802a56a73046da3794e517aeff679e9ce60de3051bad7a61cbc5758b854e47e0937
- SSDEEP 98304:bmZrmtiLnMSDUkOA/lu/DDAzlQ/OfK/YwM1gGAri/a1:4atiLM26A/YobK/I1ghrOi
- TLSH T1E046C011FB8680F1E5D101B0547BBB7A587DAA284B3489D7E7D02E6588302D37A3BB5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
afeeb2288aba5f3aa36840fe4b4e199714c141657c117e6c30f6260b3a2badef.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
afeeb2288aba5f3aa36840fe4b4e199714c141657c117e6c30f6260b3a2badef.exe
Resource
win11ltsc2024-20260710-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target afeeb2288aba5f3aa36840fe4b4e199714c141657c117e6c30f6260b3a2badef
- Size 5.5MB
- SHA256 afeeb2288aba5f3aa36840fe4b4e199714c141657c117e6c30f6260b3a2badef
- MD5 ba6b9abddc5aba44f8461b3c0ccd0da5
- SHA1 c41c512bea1821028e41c4e5a8349e9fe5f4a786
- SHA512 5b726775c0e4c348b8485d3a7997d3627b0a470bef3814052c788481515b9802a56a73046da3794e517aeff679e9ce60de3051bad7a61cbc5758b854e47e0937
- SSDEEP 98304:bmZrmtiLnMSDUkOA/lu/DDAzlQ/OfK/YwM1gGAri/a1:4atiLM26A/YobK/I1ghrOi
- TLSH T1E046C011FB8680F1E5D101B0547BBB7A587DAA284B3489D7E7D02E6588302D37A3BB5F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Pre-OS Boot
1Bootkit
1Subvert Trust Controls
1Install Root Certificate
1