General
- Target MEMZ.exe
- Size 6KB
- Sample260803-qgca8ayhpf
- SHA256 5e156626223b6c62ce97ef5309f7b336dd5df3e7adcaf084d2267389d3ea7721
- MD5 b75014a8bfb0be5bf012ef5af840d790
- SHA1 5846c6dfac30846646dd6f2135635195837ec168
- SHA512 c481731407a64c5ada9ee6247bd21ab8c683c88ef1eee7940fa8ba04ab5050656ddd71ee04d266d4ab89e4c68218e3edff9ffcd49a01d123a58cbe78f1b6d630
- SSDEEP 96:Hd5x/qcL90cJ5FSHmY9UpXMoVO+P9D5fHBfHPFUk87jqMr:v1p2cJLSJ9U3VlPp55fHP4jlr
- TLSH T194D1B82FFB9E18F3EFAD0B3205F3F4BB57A36034B5692805DE509658A6330115A27356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
MEMZ.exe
Resource
win10ltsc2021-20260513-en
21 signatures
150 seconds
Malware Config
Targets
-
- Target MEMZ.exe
- Size 6KB
- SHA256 5e156626223b6c62ce97ef5309f7b336dd5df3e7adcaf084d2267389d3ea7721
- MD5 b75014a8bfb0be5bf012ef5af840d790
- SHA1 5846c6dfac30846646dd6f2135635195837ec168
- SHA512 c481731407a64c5ada9ee6247bd21ab8c683c88ef1eee7940fa8ba04ab5050656ddd71ee04d266d4ab89e4c68218e3edff9ffcd49a01d123a58cbe78f1b6d630
- SSDEEP 96:Hd5x/qcL90cJ5FSHmY9UpXMoVO+P9D5fHBfHPFUk87jqMr:v1p2cJLSJ9U3VlPp55fHP4jlr
- TLSH T194D1B82FFB9E18F3EFAD0B3205F3F4BB57A36034B5692805DE509658A6330115A27356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.