Overview

overview

10

Static

static

10

2026-05-31...av.exe

windows10-2004-x64

6

2026-05-31...av.exe

windows11-21h2-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-05-31_85c518464457d28f65f3c5d178c669e1_amadey_cobalt-strike_darkgate_dragonforce_elex_ghostweaver_lockbit_luca-stealer_lynx_njrat
  • Size 404KB
  • Sample260531-b7htcsgs7x
  • SHA256 eb7bcc8f7521183552effc93a9575b004f0e57a507dacaf249fc47d217e5cec7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
valleyrat_s2backdoordiscoverypersistence

Malware Config

Extracted

Family

  • valleyrat_s2

Version

  • 1.0

C2

  • 103.176.197.41:90

  • 103.176.197.41:443

  • 103.176.197.41:80

Attributes
  • campaign_date

    2025. 7.25

Targets

    • Target
      2026-05-31_85c518464457d28f65f3c5d178c669e1_amadey_cobalt-strike_darkgate_dragonforce_elex_ghostweaver_lockbit_luca-stealer_lynx_njrat
    • Size 404KB
    • SHA256 eb7bcc8f7521183552effc93a9575b004f0e57a507dacaf249fc47d217e5cec7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discoverypersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks