Resubmissions

19/05/2026, 00:53

260519-a8vc4say2m10

08/10/2025, 13:23

251008-qm7djs1kw98

General

  • Target
    SecuriteInfo.com.Trojan.DownLoader49.2964.21114.20012.exe
  • Size 615KB
  • Sample260519-a8vc4say2m
  • SHA256 2eb8c662ddb5ae620d369bec65498befa76792857cc8ebc22eef791b7cce3ff5
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • fuery

C2
  • http://take.takemetotheriver.top/

  • http://hey.wtfomginc.top/

  • http://ds.emailmeanything.sbs/

  • http://top.realslimshady.xyz/

  • http://92.dmrdjmejuah.icu/

  • http://real.kabgagk234d.info/

  • http://set.setmeasdomain.cyou/

  • http://omg.itsjasonborn.today/

  • http://oh.whatisyourname.buzz/

  • http://let.mebeyourfriend.digital/

  • http://if.youwannabemylover.life/

  • http://make.mydaymakemyday.info/

  • http://iahfi.visbxskagt.com/

  • http://laf.oahgsfwklg.top/

Targets

    • Target
      SecuriteInfo.com.Trojan.DownLoader49.2964.21114.20012.exe
    • Size 615KB
    • SHA256 2eb8c662ddb5ae620d369bec65498befa76792857cc8ebc22eef791b7cce3ff5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: Fuery

      Fuery is a trojan written in Delphi.

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks