Resubmissions

31/03/2026, 01:01

260331-bdgzzaez8s8

31/03/2026, 00:59

260331-bcgb2sbz2p8

31/03/2026, 00:57

260331-ba7q8aez4z10

03/02/2026, 03:09

260203-dnmdjsgz6g8

03/02/2026, 03:07

260203-dmqpksgz6a10

23/03/2025, 00:07

250323-aejphstxdx8

23/03/2025, 00:06

250323-adrzhaxqz88

23/03/2025, 00:05

250323-adkkestxbw3

23/03/2025, 00:02

250323-abxrzaxqw910

20/03/2025, 23:27

250320-3fd5mstrw610

General

  • Target
    https://github.com/Da2dalus/The-MALWARE-Repo
  • Sample260331-bdgzzaez8s

Malware Config

Targets

    • Target
      https://github.com/Da2dalus/The-MALWARE-Repo
    • Downloads MZ/PE file

    • Drops startup file

    • Executes dropped EXE

    • Adds Run key to start application

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v16

Tasks