killmbr | 3872c12d31fc9825e8661ac01ecee2572460677afbc7093f920a8436a42e28ff | Triage™

Login
Reports

Overview

overview

Static

static

MEMZ.exe

windows11-21h2-x64

6

Resubmissions

23/09/2026, 21:37

260923-1gvsnsdg3910

23/09/2026, 21:30

260923-1chybade9710

23/09/2026, 21:28

260923-1bl9cat13k10

23/09/2026, 21:24

260923-z81bssdd6410

23/09/2026, 21:22

260923-z7x52swglh10

23/09/2026, 21:21

260923-z7rm9stz4m10

23/09/2026, 20:59

260923-zs574sch4810

23/09/2026, 20:58

260923-zsk7yach2710

26/08/2026, 02:32

260826-c1n78sx1gx10

03/06/2026, 07:22

260603-h7hlxsax2x10

Sharing

Copy URL Twitter E-mail

General

Target
MEMZ.exe
Size 16KB
Sample260923-1bl9cat13k
SHA256 3872c12d31fc9825e8661ac01ecee2572460677afbc7093f920a8436a42e28ff
MD5 1d5ad9c8d3fee874d0feb8bfac220a11
SHA1 ca6d3f7e6c784155f664a9179ca64e4034df9595
SHA512 c8246f4137416be33b6d1ac89f2428b7c44d9376ac8489a9fbf65ef128a6c53fb50479e1e400c8e201c8611992ab1d6c1bd3d6cece89013edb4d35cdd22305b1
SSDEEP 192:M2WgyvSW8gRc6olcIEiwqZKBkDFR43xWTM3LHf26gFrcx3sNq:JWgnSmFlcIqq3agmLH+6gF23sN
TLSH
T10F725CCFFAA00457E4F0C93030656634EF7E9A7A0B968EDF6CF52E829AC0D472517295
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

killmbr adware bootkit discovery persistence spyware trojan wiper

Static task

static1

3 signatures

wiper trojan killmbr

Behavioral task

behavioral1

Sample

MEMZ.exe

Resource

win11-20260911-en

windows11-21h2-x64

23 signatures

150 seconds

adware bootkit discovery persistence spyware

Malware Config

Targets

- Target
  MEMZ.exe
- Size 16KB
- SHA256 3872c12d31fc9825e8661ac01ecee2572460677afbc7093f920a8436a42e28ff
- MD5 1d5ad9c8d3fee874d0feb8bfac220a11
- SHA1 ca6d3f7e6c784155f664a9179ca64e4034df9595
- SHA512 c8246f4137416be33b6d1ac89f2428b7c44d9376ac8489a9fbf65ef128a6c53fb50479e1e400c8e201c8611992ab1d6c1bd3d6cece89013edb4d35cdd22305b1
- SSDEEP 192:M2WgyvSW8gRc6olcIEiwqZKBkDFR43xWTM3LHf26gFrcx3sNq:JWgnSmFlcIqq3agmLH+6gF23sN
- TLSH
  T10F725CCFFAA00457E4F0C93030656634EF7E9A7A0B968EDF6CF52E829AC0D472517295
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

adware bootkit discovery persistence spyware
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
- Drops file in System32 directory
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

Bootkit

Privilege Escalation

Defense Evasion

Modify Registry

Pre-OS Boot

Bootkit

Credential Access

Discovery

Browser Information Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

wipertrojankillmbr

behavioral1

adwarebootkitdiscoverypersistencespyware

© 2018-2026

Terms | Privacy