Resubmissions

30/06/2025, 16:51

250630-vc5jeshn6z8

23/01/2025, 23:32

250123-3jsr7szqhq

23/01/2025, 23:01

250123-2znbzsxmgt9

15/12/2024, 21:47

241215-1nhfxsykcs3

11/12/2024, 15:28

241211-swgklasqdj8

21/09/2024, 16:31

240921-t1qvhasdmk6

12/08/2024, 10:22

240812-mebp5awhkn6

25/07/2024, 11:21

240725-nge11ayeqg7

13/07/2024, 10:18

240713-mcdfyaxajp9

11/07/2024, 20:03

240711-ysrjaa1hnj7

General

  • Target
    AutoIt-Extractor-net40-x64.exe
  • Size 1.2MB
  • Sample250630-vc5jeshn6z
  • SHA256 d82d49e9ad153ef84670c1d0bde5f36b540d32fa037cca6127ce9e4e366b7403
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      AutoIt-Extractor-net40-x64.exe
    • Size 1.2MB
    • SHA256 d82d49e9ad153ef84670c1d0bde5f36b540d32fa037cca6127ce9e4e366b7403
    • MD5 SHA1 SHA512 SSDEEP
    • Downloads MZ/PE file

    • Executes dropped EXE

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v16

Tasks