Resubmissions

06/05/2026, 04:18

260506-ewxd6aev2j10

04/03/2026, 09:37

260304-llj5eafy4k8

General

  • Target
    acca258713692d82ea4b9bdf72dfa6dadc65083b1d37828bac0d2e6af6ba1712
  • Size 1.1MB
  • Sample260506-ewxd6aev2j
  • SHA256 acca258713692d82ea4b9bdf72dfa6dadc65083b1d37828bac0d2e6af6ba1712
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Targets

    • Target
      acca258713692d82ea4b9bdf72dfa6dadc65083b1d37828bac0d2e6af6ba1712
    • Size 1.1MB
    • SHA256 acca258713692d82ea4b9bdf72dfa6dadc65083b1d37828bac0d2e6af6ba1712
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    • Family: valleyrat

    • https://www.esentire.com/blog/winos4-0-online-module-staging-component-used-in-cleversoar-campaign

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks