Overview

overview

10

Static

static

5

कर न...��.exe

windows10-2004-x64

10

कर न...��.exe

windows11-21h2-x64

10

Resubmissions

25/10/2025, 21:36

251025-1f571sar4s10

20/10/2025, 12:13

251020-pdxx3shr7y10

Sharing

Copy URL Twitter E-mail

General

  • Target
    कर निरीक्षण.rar
  • Size 224KB
  • Sample251020-pdxx3shr7y
  • SHA256 e36f48558ca70b8655ff82b93f263103feb18794a12db208cd70d1ed38474bd3
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
valleyrat_s2backdoor

Malware Config

Extracted

Family

  • valleyrat_s2

Version

  • 1.0

C2

  • 27.124.9.13:5689

  • 127.0.0.1:80

Attributes
  • campaign_date

    2025.10. 9

Targets

    • Target
      कर निरीक्षण.exe
    • Size 10.0MB
    • SHA256 87830c47ee8d8db06b5e6b6a7d9d53e67deda22131f32cdab8eb500ad5e5cf77
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    backdoorvalleyrat_s2

    • ValleyRat

      ValleyRat stage2 is a backdoor written in C++.

      backdoorvalleyrat_s2

    • Valleyrat_s2 family

      valleyrat_s2

    • Drops startup file

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks