General
- Target Releases.rar
- Size 2.9MB
- Sample261030-bec3eavtat
- SHA256 edb5f94fc885c5b92112bbaa7a621cbcd6ba9ee3b6dd22993094ead66180a87e
- MD5 c2993341ee31d191d88233fa1f97afce
- SHA1 c74c99a9af3bd94d824fe00d89d507a6eddfc821
- SHA512 1c8e6e36cd652b8d078cd99b893d449c73fc71710e14308fb79b14636842461decaf0768b27aa0069bae3d8b4e70bf95fe9a4b2f85a760fee737e9fc420e00c2
- SSDEEP 49152:LSPTCE18LYnojOhahsBLe4q3zkRhmdTUTtksUM44ofjmeWkdbpmRZwwAkbF16R9z:27D18LYMuosBLe4CW/BksUMAKe8Rawfg
- TLSH T137D5330661582F13A55353B788442A15A78B7B0BAF1AC7CE60A37C873F52CBD92BD70D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Releases/PEEKABOO.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
Releases/PEEKABOO.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target Releases/PEEKABOO.COM
- Size 921KB
- SHA256 c1aeab35f61f12db28274d82713bff400b808625854a18e49504022f92805e31
- MD5 d0ae6aea701de9f127f91e7efdb50252
- SHA1 cb9ef64cbcb999372fb4046e99fe89a03df9bc81
- SHA512 505d11808e9923ff0ec1a51acd51509711f8c5c42da81b47a97249954b06f6f45ddda4655446daeb7f231785cd484ebc6e9ada92b857ad3a8d7ce04276536f13
- SSDEEP 24576:lCFZOZHLhrN+f4SULfWyBPzB8JAk4cQATb:oF+LL+fIWybB8
- TLSH T15915339832772A1FC8E73B37E5E739A463AE323D1936215C04A5F37D1E415C05726EA2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Disables Task Manager via registry modification
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Drops file in System32 directory