Resubmissions

02/07/2026, 15:59

260702-te4jgahs8t10

02/07/2026, 15:58

260702-tegppses9l10

General

  • Target
    HelloUser-main.zip
  • Size 38.2MB
  • Sample260702-tegppses9l
  • SHA256 96f6999876a14b8d74ea2007c987ea2257da7f25c95f25d2e346396c5287b38a
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • orcus

Botnet
  • Nigga Rat

C2
  • 94.26.106.89

Mutex
  • fb181432de6c4c48b2f234dbadec27d0

Attributes
  • administration_rights_required

    false

  • anti_debugger

    false

  • anti_tcp_analyzer

    false

  • antivm

    false

  • autostart_method

    1

  • change_creation_date

    false

  • force_installer_administrator_privileges

    false

  • hide_file

    false

  • install

    false

  • installation_folder

    %appdata%\Microsoft\Speech\AudioDriver.exe

  • installservice

    false

  • keylogger_enabled

    false

  • newcreationdate

    01/11/2015 11:40:41

  • plugins

    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

  • reconnect_delay

    10000

  • registry_autostart_keyname

    Audio HD Driver

  • registry_hidden_autostart

    false

  • set_admin_flag

    false

  • tasksch_name

    Audio HD Driver

  • tasksch_request_highest_privileges

    false

  • try_other_autostart_onfail

    false

aes.plain

Targets

    • Target
      HelloUser-main.zip
    • Size 38.2MB
    • SHA256 96f6999876a14b8d74ea2007c987ea2257da7f25c95f25d2e346396c5287b38a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Matrix

Tasks