Resubmissions

08-02-2025 21:19

250208-z6fvdatqav 8

08-02-2025 20:32

250208-zbptssslbv 8

08-02-2025 20:14

250208-y1frratkgn 8

08-02-2025 18:59

250208-xndaesylaz 8

08-02-2025 18:36

250208-w8xdcszkdl 6

08-02-2025 17:02

250208-vj3y6swkh1 10

08-02-2025 16:29

250208-tzkl4avmas 7

08-02-2025 16:29

250208-tzf9nswnhn 4

08-02-2025 16:23

250208-tvsf5svkgx 8

08-02-2025 16:12

250208-tnstbstqg1 10

General

  • Target

    test.txt

  • Size

    18B

  • Sample

    250202-stqeqazkbj

  • MD5

    5b3f97d48c8751bd031b7ea53545bdb6

  • SHA1

    88be3374c62f23406ec83bb11279f8423bd3f88d

  • SHA256

    d8fce9dd9c65ca143343f7711859a7cffc3c5e656a8b84108183fb769a12ed8b

  • SHA512

    ed2de1eec50310ced4bde8ef6ae4b7902920b007df7b6aeb200cfe9fcc0d36ef05af7526c4675be2feac52831668798d5fe3523175efad6f6549b30f30a0b5d6

Malware Config

Targets

    • Target

      test.txt

    • Size

      18B

    • MD5

      5b3f97d48c8751bd031b7ea53545bdb6

    • SHA1

      88be3374c62f23406ec83bb11279f8423bd3f88d

    • SHA256

      d8fce9dd9c65ca143343f7711859a7cffc3c5e656a8b84108183fb769a12ed8b

    • SHA512

      ed2de1eec50310ced4bde8ef6ae4b7902920b007df7b6aeb200cfe9fcc0d36ef05af7526c4675be2feac52831668798d5fe3523175efad6f6549b30f30a0b5d6

    • Executes dropped EXE

    • Loads dropped DLL

    • Mark of the Web detected: This indicates that the page was originally saved or cloned.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks