Resubmissions

19/05/2026, 01:07

260519-bgswmsay8m10

30/09/2025, 04:01

250930-elg7gsap5t8

General

  • Target
    file.exe
  • Size 698KB
  • Sample260519-bgswmsay8m
  • SHA256 bb6d31239a6a4db0a50d8411ef2cc1c91ec60abe92f456c273c6ec290c294d7e
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • fuery

C2
  • http://take.takemetotheriver.top/

  • http://hey.wtfomginc.top/

  • http://ds.emailmeanything.sbs/

  • http://top.realslimshady.xyz/

  • http://92.dmrdjmejuah.icu/

  • http://real.kabgagk234d.info/

  • http://set.setmeasdomain.cyou/

  • http://omg.itsjasonborn.today/

  • http://oh.whatisyourname.buzz/

  • http://let.mebeyourfriend.digital/

  • http://if.youwannabemylover.life/

  • http://make.mydaymakemyday.info/

  • http://iahfi.visbxskagt.com/

  • http://laf.oahgsfwklg.top/

Targets

    • Target
      file.exe
    • Size 698KB
    • SHA256 bb6d31239a6a4db0a50d8411ef2cc1c91ec60abe92f456c273c6ec290c294d7e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: Fuery

      Fuery is a trojan written in Delphi.

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks