General
- Target wps_office_inst.exe
- Size 5.2MB
- Sample260905-wvzassfc36
- SHA256 06ddfa9b592105ba3f1b80b5f34ea1ab1f9da2dc4e35dabc545d12716d4203e3
- MD5 4a56a4e9c701f01c64320f050498a58a
- SHA1 79436605827b230372a67767cad662f574cbd246
- SHA512 bc9fccfeae6a3a5df9e1e7d861fc0a6add7a1d3f76f967b5c57b7c82d6b8ae4524336e9d6c04afa73760b860be82c5a5eec7cdcc404664effeefabcad9e7440a
- SSDEEP 98304:21+e0bOcjm1KyHugiq5TZtkq8P6hwGy+zNa/G:NemWVr8bGyg2G
- TLSH T19E46BF11F78985B1F5A101B0597ABB7E583DBE284B3085D7A3D01D2A84312D37A3BB9F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
wps_office_inst.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
wps_office_inst.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target wps_office_inst.exe
- Size 5.2MB
- SHA256 06ddfa9b592105ba3f1b80b5f34ea1ab1f9da2dc4e35dabc545d12716d4203e3
- MD5 4a56a4e9c701f01c64320f050498a58a
- SHA1 79436605827b230372a67767cad662f574cbd246
- SHA512 bc9fccfeae6a3a5df9e1e7d861fc0a6add7a1d3f76f967b5c57b7c82d6b8ae4524336e9d6c04afa73760b860be82c5a5eec7cdcc404664effeefabcad9e7440a
- SSDEEP 98304:21+e0bOcjm1KyHugiq5TZtkq8P6hwGy+zNa/G:NemWVr8bGyg2G
- TLSH T19E46BF11F78985B1F5A101B0597ABB7E583DBE284B3085D7A3D01D2A84312D37A3BB9F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.