General
- Target reiboot.exe
- Size 1.4MB
- Sample260831-ajxryaea78
- SHA256 54ab8acf3d868c58b4e20a7ff9f0974e015953751e82bc66237507f32c5a6f4b
- MD5 db005ffd3b7dfa236f8ccba13399d4b6
- SHA1 5e04ec53bfdec35e54aec4cef9c0a2b1e0369d8b
- SHA512 a8f0ec5862b60e1b365f300dfee6f039aa4aff6765ab47880d9618e2ac5eb86219c6a7af8ac5e9aa28534c9808f0080c9d0bc9a9ee08516c5ccd24dee35ddbe5
- SSDEEP 24576:2YeCp4pUy/76wh3RurweoGxRzZmeYv+Sq9XimtOpP3WhkjG5ExGVaRKW8Mz7thjy:NeCpkXhspoGLlfYnq9XimtOF3Whky5E+
- TLSH T1806512E6486E57B7E8CD13B0DF3DBD53516A0D87396E69A82E40B6C012F94C2D312E4B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Behavioral task
behavioral1
Sample
reiboot.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
reiboot.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target reiboot.exe
- Size 1.4MB
- SHA256 54ab8acf3d868c58b4e20a7ff9f0974e015953751e82bc66237507f32c5a6f4b
- MD5 db005ffd3b7dfa236f8ccba13399d4b6
- SHA1 5e04ec53bfdec35e54aec4cef9c0a2b1e0369d8b
- SHA512 a8f0ec5862b60e1b365f300dfee6f039aa4aff6765ab47880d9618e2ac5eb86219c6a7af8ac5e9aa28534c9808f0080c9d0bc9a9ee08516c5ccd24dee35ddbe5
- SSDEEP 24576:2YeCp4pUy/76wh3RurweoGxRzZmeYv+Sq9XimtOpP3WhkjG5ExGVaRKW8Mz7thjy:NeCpkXhspoGLlfYnq9XimtOF3Whky5E+
- TLSH T1806512E6486E57B7E8CD13B0DF3DBD53516A0D87396E69A82E40B6C012F94C2D312E4B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1