General
- Target GearUP-3.3.0-gud3ymkf83.exe
- Size 35.7MB
- Sample260930-yn6gms1v6m
- SHA256 cf4823a2153c3a6eefc800c7fdfea8ce342d07f2b064348385ec11492b9f859b
- MD5 ea7b30ec36c0703f22f349f04ea39af2
- SHA1 f39b96e4619ab1fbf4dba7560ad60d0a6ef19d08
- SHA512 6ad223835cc2cf7ed56f8199afbef3d3748d30ab53a80384c0a4c721a0449d0276b46e29a156d14949298aaaa40b919db5c7291ff2aeb3cafbaee175dcc83c57
- SSDEEP 786432:sr6GBEIeky94UL7kslO8Tte3JpJvecc5iZnRS7zUJu9yIv6WKQ:CEYULY7OgZfpVQ7zUJu9Rv6WKQ
- TLSH T1E1873302BF938072D56B05319A7D67B6D97ABE205331C5C3A79A3C2C5C316C2993B39E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
GearUP-3.3.0-gud3ymkf83.exe
Resource
win11-20260911-en
27 signatures
150 seconds
Malware Config
Targets
-
- Target GearUP-3.3.0-gud3ymkf83.exe
- Size 35.7MB
- SHA256 cf4823a2153c3a6eefc800c7fdfea8ce342d07f2b064348385ec11492b9f859b
- MD5 ea7b30ec36c0703f22f349f04ea39af2
- SHA1 f39b96e4619ab1fbf4dba7560ad60d0a6ef19d08
- SHA512 6ad223835cc2cf7ed56f8199afbef3d3748d30ab53a80384c0a4c721a0449d0276b46e29a156d14949298aaaa40b919db5c7291ff2aeb3cafbaee175dcc83c57
- SSDEEP 786432:sr6GBEIeky94UL7kslO8Tte3JpJvecc5iZnRS7zUJu9yIv6WKQ:CEYULY7OgZfpVQ7zUJu9Rv6WKQ
- TLSH T1E1873302BF938072D56B05319A7D67B6D97ABE205331C5C3A79A3C2C5C316C2993B39E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Pre-OS Boot
1Bootkit
1Subvert Trust Controls
1SIP and Trust Provider Hijacking
1Discovery
Browser Information Discovery
1Network Share Discovery
1Peripheral Device Discovery
1Query Registry
3System Information Discovery
4System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
1System Time Discovery
1