Overview

overview

10

Static

static

3

Assessment...BD.exe

windows10-2004-x64

10

Resubmissions

24/04/2026, 06:57

260424-hraalsas4z10

23/04/2026, 02:30

260423-cy9fdsgy2y8

Sharing

Copy URL Twitter E-mail

General

  • Target
    給与および職位改定ならびに給与明細ダウンロードのご案内.gz
  • Size 2.4MB
  • Sample260424-hraalsas4z
  • SHA256 d800e23ab94066c491c45f7b6ba6aa59125c679f3cb9cd5e4152e92f07fb899b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
valleyratdiscovery

Malware Config

Targets

    • Target
      Assessment.Letter.1D27FFF720A99BBF8BD.EXE
    • Size 4.7MB
    • SHA256 2067856fa02a7e3a264ef8514a6189255927bfec16d4b8aa724580a72f7cd17d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    discoveryvalleyrat

    • Family: valleyrat

      valleyrat

    • https://www.esentire.com/blog/winos4-0-online-module-staging-component-used-in-cleversoar-campaign

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks