General
- Target ب.exe
- Size 18KB
- Sample260801-p95ykabl6s
- SHA256 10e52f69b7d01775c27f7a711a331c2c03b0116f1ba05549eed5f968a7692547
- MD5 936dc48f695577b260f28495eb50722d
- SHA1 5ec4eb194a36efba1ddeb5a7a6573e8354f1fd15
- SHA512 d740671db72155537cf12ea0aba83f17e4263e79faf3187a88b6e93a0dbcc9d5d930042f1c73deb5a00034b0c81e6f38e6107ff6a743c7fdd80d6c103036e808
- SSDEEP 192:d7UnFWTtINTyA7KMDqe5PdvvqPeakb4lPybmyqdkGlSuu17F3rkyEYo9GWtvB3NG:C4xg9+EaPNPyqdkGsVF34yw9V3NjudE
- TLSH T1B782D60CB7EC8610D2BE5AB69DB2921147B0F0538D23CF4E1DD558DA2D33724AAA5FE1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ب.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
ب.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target ب.exe
- Size 18KB
- SHA256 10e52f69b7d01775c27f7a711a331c2c03b0116f1ba05549eed5f968a7692547
- MD5 936dc48f695577b260f28495eb50722d
- SHA1 5ec4eb194a36efba1ddeb5a7a6573e8354f1fd15
- SHA512 d740671db72155537cf12ea0aba83f17e4263e79faf3187a88b6e93a0dbcc9d5d930042f1c73deb5a00034b0c81e6f38e6107ff6a743c7fdd80d6c103036e808
- SSDEEP 192:d7UnFWTtINTyA7KMDqe5PdvvqPeakb4lPybmyqdkGlSuu17F3rkyEYo9GWtvB3NG:C4xg9+EaPNPyqdkGsVF34yw9V3NjudE
- TLSH T1B782D60CB7EC8610D2BE5AB69DB2921147B0F0538D23CF4E1DD558DA2D33724AAA5FE1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Modifies system executable filetype association
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Drops file in System32 directory