General
- Target D7MAS VIRUS MADE BY L2RF.rar
- Size 1.3MB
- Sample260924-ehqz8ade63
- SHA256 bd003e59145ef045f6902bcd48b38fefc2877216671bc12499958b5b23430f30
Score
7/10
Malware Config
Targets
-
- Target D7MAS VIRUS MADE BY L2RF/RESALLES/D7MOSY VIRUS.exe
- Size 923KB
- SHA256 4bff0923756b97f3d04de2d45e886076d77a6495d32e985b452a927d24f68323
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
- Target D7MAS VIRUS MADE BY L2RF/SRC/GDI.exe
- Size 800KB
- SHA256 8237e127fa112db6ae8e5f2e6bc50edd904f2429123d630f89a8d0f53d10c4d1
Score3/10 -
- Target D7MAS VIRUS MADE BY L2RF/SRC/MBR.exe
- Size 93KB
- SHA256 acddde9514e3b9d5c40b3d1750af5f4187c99f8987b027d6da44fb6bcf79b3ca
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.