Resubmissions

03/07/2026, 11:55

260703-n3khlsgt4w10

03/07/2026, 11:42

260703-nt85lsgs7x10

General

  • Target
    FakeElytra.java
  • Size 383B
  • Sample260703-nt85lsgs7x
  • SHA256 033108bc483492849f05727de25700d600477ace30635db4f538d3fca63d0656
  • MD5 SHA1 SHA512 TLSH

Malware Config

Extracted

Language
  • hta

Source
URLs
  • hta.dropper

    https://executor-check-production.up.railway.app/

Extracted

Language
  • hta

Source
URLs
  • hta.dropper

    https://executor-check-production.up.railway.app/

Extracted

Language
  • hta

Source
URLs
  • hta.dropper

    https://executor-check.up.railway.app

Extracted

Language
  • hta

Source
URLs
  • hta.dropper

    https://executor-check.up.railway.app/

Targets

    • Target
      FakeElytra.java
    • Size 383B
    • SHA256 033108bc483492849f05727de25700d600477ace30635db4f538d3fca63d0656
    • MD5 SHA1 SHA512 TLSH
    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Download via BitsAdmin

MITRE ATT&CK Enterprise v16

Tasks