Resubmissions

14/09/2026, 16:22

260914-tt8rqs1xdv10

14/09/2026, 15:32

260914-sy37dabe2310

13/09/2026, 16:27

260913-tx6rjsstf110

13/09/2026, 16:13

260913-tn7bqassaw10

13/09/2026, 16:02

260913-tgvpca1zhs10

13/09/2026, 15:57

260913-tdzh5ayhqd10

13/09/2026, 13:06

260913-qb91astgpd10

13/09/2026, 13:06

260913-qb5etatgng10

13/09/2026, 13:05

260913-qbxpzatglh10

13/09/2026, 13:05

260913-qbppcsyzgv10

General

  • Target
    memz.by.iTzDrK_.rar
  • Size 17KB
  • Sample260914-sy37dabe23
  • SHA256 3d5d9bc94be3d1b7566a652155b0b37006583868311f20ef00283c30314b5c61
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      memz.by.iTzDrK_.rar
    • Size 17KB
    • SHA256 3d5d9bc94be3d1b7566a652155b0b37006583868311f20ef00283c30314b5c61
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects KillMBR

    • Family: KillMBR

      KillMBR is a trojan that attempts to overwrite the Master Boot Record.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Enterprise v16

Tasks