Resubmissions

24/02/2025, 02:19

250224-cscjgayrdl 8

24/02/2025, 02:15

250224-cpz6csyrbl 8

24/02/2025, 02:13

250224-cnmtmsyraj 8

24/02/2025, 02:06

250224-cjnkdayqen 8

24/02/2025, 01:57

250224-cdr1lsyqaj 8

24/02/2025, 01:53

250224-cbfjssypgm 8

General

  • Target

    https://github.com/Da2dalus/The-MALWARE-Repo

  • Sample

    250224-cjnkdayqen

Malware Config

Targets

    • Target

      https://github.com/Da2dalus/The-MALWARE-Repo

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Legitimate hosting services abused for malware hosting/C2

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks