General
- Target b6aa303ea9f81784e637691bca6fcf3b84d32f49ec1f41daabab2ce1aff3887a
- Size 5.9MB
- Sample260811-tcatdas1bt
- SHA256 b6aa303ea9f81784e637691bca6fcf3b84d32f49ec1f41daabab2ce1aff3887a
- MD5 bab4d42fe9fa6578b23f6cbc2093ae2e
- SHA1 89c15304fc28435868964d0a7c22016c0970f3ac
- SHA512 fa7cf5b8a488b1a8b9acf1d56fcdc1fb392d928ef3927586a35927578db6da18fb9cacf3e601e7c33182945a98fcad6d86bcd16ff3dcf9d1959d155eaa57c4ea
- SSDEEP 49152:D9gXbzDNefB9VjAshY+MlUXDKOculo28XzQ7KFx3ddEA7URjSGeWJiM0ea9vOHkB:D9SrN2bxEiXeWJ5kb3QgW+fVfA55Ov
- TLSH T159567C52ABA940B8E167D17C881B8D43D6773C5817B086EB0294B26A1FB77E15E3F313
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
b6aa303ea9f81784e637691bca6fcf3b84d32f49ec1f41daabab2ce1aff3887a.dll
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
b6aa303ea9f81784e637691bca6fcf3b84d32f49ec1f41daabab2ce1aff3887a.dll
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target b6aa303ea9f81784e637691bca6fcf3b84d32f49ec1f41daabab2ce1aff3887a
- Size 5.9MB
- SHA256 b6aa303ea9f81784e637691bca6fcf3b84d32f49ec1f41daabab2ce1aff3887a
- MD5 bab4d42fe9fa6578b23f6cbc2093ae2e
- SHA1 89c15304fc28435868964d0a7c22016c0970f3ac
- SHA512 fa7cf5b8a488b1a8b9acf1d56fcdc1fb392d928ef3927586a35927578db6da18fb9cacf3e601e7c33182945a98fcad6d86bcd16ff3dcf9d1959d155eaa57c4ea
- SSDEEP 49152:D9gXbzDNefB9VjAshY+MlUXDKOculo28XzQ7KFx3ddEA7URjSGeWJiM0ea9vOHkB:D9SrN2bxEiXeWJ5kb3QgW+fVfA55Ov
- TLSH T159567C52ABA940B8E167D17C881B8D43D6773C5817B086EB0294B26A1FB77E15E3F313
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.