Resubmissions
14/09/2026, 16:22
260914-tt8rqs1xdv1014/09/2026, 15:32
260914-sy37dabe231013/09/2026, 16:27
260913-tx6rjsstf11013/09/2026, 16:13
260913-tn7bqassaw1013/09/2026, 16:02
260913-tgvpca1zhs1013/09/2026, 15:57
260913-tdzh5ayhqd1013/09/2026, 13:06
260913-qb91astgpd1013/09/2026, 13:06
260913-qb5etatgng1013/09/2026, 13:05
260913-qbxpzatglh1013/09/2026, 13:05
260913-qbppcsyzgv10General
- Target memz.by.iTzDrK_.rar
- Size 17KB
- Sample260914-sy37dabe23
- SHA256 3d5d9bc94be3d1b7566a652155b0b37006583868311f20ef00283c30314b5c61
- MD5 352c9d71fa5ab9e8771ce9e1937d88e9
- SHA1 7ef6ee09896dd5867cff056c58b889bb33706913
- SHA512 6c133aa0c0834bf3dbb3a4fb7ff163e3b17ae2500782d6bba72812b4e703fb3a4f939a799eeb17436ea24f225386479d3aa3b81fdf35975c4f104914f895ff23
- SSDEEP 384:7FbiYdriLCwBoe6POLT9bxaF851AfS9KL6bPsn/OMrZAGE:7FbldrliOSbxr1AfS9KM+/OMa1
- TLSH T18282D04E4133B86024BE329DE1B9477AABC65B8A3CC4345EAAFC5F13C14CC30EA255A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target memz.by.iTzDrK_.rar
- Size 17KB
- SHA256 3d5d9bc94be3d1b7566a652155b0b37006583868311f20ef00283c30314b5c61
- MD5 352c9d71fa5ab9e8771ce9e1937d88e9
- SHA1 7ef6ee09896dd5867cff056c58b889bb33706913
- SHA512 6c133aa0c0834bf3dbb3a4fb7ff163e3b17ae2500782d6bba72812b4e703fb3a4f939a799eeb17436ea24f225386479d3aa3b81fdf35975c4f104914f895ff23
- SSDEEP 384:7FbiYdriLCwBoe6POLT9bxaF851AfS9KL6bPsn/OMrZAGE:7FbldrliOSbxr1AfS9KM+/OMa1
- TLSH T18282D04E4133B86024BE329DE1B9477AABC65B8A3CC4345EAAFC5F13C14CC30EA255A1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects KillMBR
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.