Overview

overview

10

Static

static

10

MEMZ.exe

windows11-21h2-x64

10

Resubmissions

23/09/2026, 21:37

260923-1gvsnsdg3910

23/09/2026, 21:30

260923-1chybade9710

23/09/2026, 21:28

260923-1bl9cat13k10

23/09/2026, 21:24

260923-z81bssdd6410

23/09/2026, 21:22

260923-z7x52swglh10

23/09/2026, 21:21

260923-z7rm9stz4m10

23/09/2026, 20:59

260923-zs574sch4810

23/09/2026, 20:58

260923-zsk7yach2710

26/08/2026, 02:32

260826-c1n78sx1gx10

03/06/2026, 07:22

260603-h7hlxsax2x10

Sharing

Copy URL Twitter E-mail

General

  • Target
    MEMZ.exe
  • Size 16KB
  • Sample260923-1chybade97
  • SHA256 3872c12d31fc9825e8661ac01ecee2572460677afbc7093f920a8436a42e28ff
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
wipertrojankillmbr

Malware Config

Signatures

  • Family: KillMBR

    KillMBR is a trojan that attempts to overwrite the Master Boot Record.

    wipertrojankillmbr
  • Detects KillMBR 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • MEMZ.exe
    .exe 16KB

MEMZ.exe

  • IMPHASH 2eb516ca11536a75b455bb2361a5a574
  • SHA256 3872c12d31fc9825e8661ac01ecee2572460677afbc7093f920a8436a42e28ff
  • MD5 SHA1 SHA512 SSDEEP TLSH
windows:5windowsx86arch:x86

  • Detects KillMBR

  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
1
Major OS version
5
Entry point
4653
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths