General
- Target 3872c12d31fc9825e8661ac01ecee2572460677afbc7093f920a8436a42e28ff.zip
- Size 8KB
- Sample260829-m1cjjsysfs
- SHA256 ea2e0c11aea1ec23f1be31f404f83b18addc8f4f55613ef0e9f28b33568d6504
Score
10/10
Malware Config
Targets
-
- Target 3872c12d31fc9825e8661ac01ecee2572460677afbc7093f920a8436a42e28ff.exe
- Size 16KB
- SHA256 3872c12d31fc9825e8661ac01ecee2572460677afbc7093f920a8436a42e28ff
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Drops file in System32 directory