General
- Target hydrogen.exe
- Size 128KB
- Sample260804-v1lffsaq4z
- SHA256 283f195bad35cac6e9452c2791eaeb90d9cd6d506aa16c6505247e5be74aabf0
- MD5 efdd98ae7ba8aa1a457d6938d554e5bb
- SHA1 5adc3d12792396b569bf024676636262bcd9c7ff
- SHA512 6c1e6adfcf7416c153b8f57149d232bd3caecda0806369cb00131e0877559953041017a641f910e7360ddeb059e568c4c4bbbbed28ed902f80221a68f1bafae9
- SSDEEP 3072:la0U9iSEZV1E2gK90lzIvJx1h9xgfHVpSIzM8ya9icI:lasSEZPEgGOFh9xgKIo
- TLSH T15ED36C27B3A534E8E9B68235C5511606E77378720B209FAF036046B95F376D0AE7BB70
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
hydrogen.exe
Resource
win10ltsc2021-20260513-ja
6 signatures
900 seconds
Malware Config
Targets
-
- Target hydrogen.exe
- Size 128KB
- SHA256 283f195bad35cac6e9452c2791eaeb90d9cd6d506aa16c6505247e5be74aabf0
- MD5 efdd98ae7ba8aa1a457d6938d554e5bb
- SHA1 5adc3d12792396b569bf024676636262bcd9c7ff
- SHA512 6c1e6adfcf7416c153b8f57149d232bd3caecda0806369cb00131e0877559953041017a641f910e7360ddeb059e568c4c4bbbbed28ed902f80221a68f1bafae9
- SSDEEP 3072:la0U9iSEZV1E2gK90lzIvJx1h9xgfHVpSIzM8ya9icI:lasSEZPEgGOFh9xgKIo
- TLSH T15ED36C27B3A534E8E9B68235C5511606E77378720B209FAF036046B95F376D0AE7BB70
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Drops file in System32 directory