General

  • Target
    ب.exe
  • Size 18KB
  • Sample260801-p95ykabl6s
  • SHA256 10e52f69b7d01775c27f7a711a331c2c03b0116f1ba05549eed5f968a7692547
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      ب.exe
    • Size 18KB
    • SHA256 10e52f69b7d01775c27f7a711a331c2c03b0116f1ba05549eed5f968a7692547
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Modifies system executable filetype association

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks