Resubmissions

02/05/2025, 16:43

250502-t8ky8astgy9

02/05/2025, 16:37

250502-t5balsstes6

02/05/2025, 16:34

250502-t3lnkavms79

02/05/2025, 16:32

250502-t1yv4sstbw3

02/05/2025, 16:31

250502-t1ga3astaz5

02/05/2025, 16:28

250502-tyxv2asshv5

02/05/2025, 16:27

250502-tycvvsssgw5

02/05/2025, 16:26

250502-txt3rassgs5

02/05/2025, 16:26

250502-txn7hassfz1

02/05/2025, 16:22

250502-tvqmjsssew7

General

  • Target
    win10 robllox.png
  • Size 59KB
  • Sample250502-t3lnkavms7
  • SHA256 e53f9d866c843266913262dce2db481d9bc67d7c0aee0df64d0b9e147c5c485d
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      win10 robllox.png
    • Size 59KB
    • SHA256 e53f9d866c843266913262dce2db481d9bc67d7c0aee0df64d0b9e147c5c485d
    • MD5 SHA1 SHA512 SSDEEP
    • Modifies boot configuration data using bcdedit

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v16

Tasks