General
- Target zahfware.exe
- Size 850KB
- Sample261002-vm2khszglf
- SHA256 3a5ad11f36fe40a1e884c7611bc6baef49b67790e57ab1f2d597c8a8e79d2003
- MD5 6602e0bcc55f4683cc0fb3bc38494968
- SHA1 e6826ea6563f03440e381f68cf327604a62cc062
- SHA512 36024607743bde0616d94b07749bae05f9906c93318da89b7b7f32e76d7ce8bc8e4aed5b1ddcb1ccbc6a5fced04d03cb68516ccad9cca121a67dee2316c79a47
- SSDEEP 12288:ajRDARhUQLzkZFJXHByzhsR3roZeepwU9LNl:oYhUQqPXHByzhqepVLNl
- TLSH T1F105484BA9548F4CD82243F75442C8B21D436D8868B886A615F7FF2FB3B609768C7C5B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
zahfware.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
zahfware.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target zahfware.exe
- Size 850KB
- SHA256 3a5ad11f36fe40a1e884c7611bc6baef49b67790e57ab1f2d597c8a8e79d2003
- MD5 6602e0bcc55f4683cc0fb3bc38494968
- SHA1 e6826ea6563f03440e381f68cf327604a62cc062
- SHA512 36024607743bde0616d94b07749bae05f9906c93318da89b7b7f32e76d7ce8bc8e4aed5b1ddcb1ccbc6a5fced04d03cb68516ccad9cca121a67dee2316c79a47
- SSDEEP 12288:ajRDARhUQLzkZFJXHByzhsR3roZeepwU9LNl:oYhUQqPXHByzhqepVLNl
- TLSH T1F105484BA9548F4CD82243F75442C8B21D436D8868B886A615F7FF2FB3B609768C7C5B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.