Resubmissions
20/10/2026, 20:58
261020-zsfmfsh13m1020/10/2026, 13:30
261020-qr7j4sat5x1019/10/2026, 19:12
261019-xww3hayt7p1018/10/2026, 08:28
261018-kc237abz3x1017/10/2026, 23:27
261017-3fd5msxz4k1017/10/2026, 19:01
261017-xpdmksysex1017/10/2026, 18:56
261017-xljdnabt6k1017/10/2026, 18:54
261017-xken3sbt4q1017/10/2026, 18:48
261017-xfxdbsbt2n1017/10/2026, 15:23
261017-ssnvhahy3s10General
- Target MEMZ.exe
- Size 16KB
- Sample261017-3fd5msxz4k
- SHA256 3872c12d31fc9825e8661ac01ecee2572460677afbc7093f920a8436a42e28ff
- MD5 1d5ad9c8d3fee874d0feb8bfac220a11
- SHA1 ca6d3f7e6c784155f664a9179ca64e4034df9595
- SHA512 c8246f4137416be33b6d1ac89f2428b7c44d9376ac8489a9fbf65ef128a6c53fb50479e1e400c8e201c8611992ab1d6c1bd3d6cece89013edb4d35cdd22305b1
- SSDEEP 192:M2WgyvSW8gRc6olcIEiwqZKBkDFR43xWTM3LHf26gFrcx3sNq:JWgnSmFlcIqq3agmLH+6gF23sN
- TLSH T10F725CCFFAA00457E4F0C93030656634EF7E9A7A0B968EDF6CF52E829AC0D472517295
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
MEMZ.exe
Resource
win10v2004-20260911-en
26 signatures
900 seconds
Behavioral task
behavioral2
Sample
MEMZ.exe
Resource
win11ltsc2024-20260911-en
21 signatures
900 seconds
Malware Config
Targets
-
- Target MEMZ.exe
- Size 16KB
- SHA256 3872c12d31fc9825e8661ac01ecee2572460677afbc7093f920a8436a42e28ff
- MD5 1d5ad9c8d3fee874d0feb8bfac220a11
- SHA1 ca6d3f7e6c784155f664a9179ca64e4034df9595
- SHA512 c8246f4137416be33b6d1ac89f2428b7c44d9376ac8489a9fbf65ef128a6c53fb50479e1e400c8e201c8611992ab1d6c1bd3d6cece89013edb4d35cdd22305b1
- SSDEEP 192:M2WgyvSW8gRc6olcIEiwqZKBkDFR43xWTM3LHf26gFrcx3sNq:JWgnSmFlcIqq3agmLH+6gF23sN
- TLSH T10F725CCFFAA00457E4F0C93030656634EF7E9A7A0B968EDF6CF52E829AC0D472517295
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Loads dropped DLL
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
Drops file in System32 directory