20139724a2be4ee978d05c14037fbde89d37bb90c485f13ac5713f240d176494

Resubmissions

04/07/2026, 01:57

260704-cdhryaas5x

04/07/2026, 01:53

260704-cbgf4aas5w7

Sharing

Copy URL Twitter E-mail

General

Target
Occ'xDDoS.rar
Size 42.7MB
Sample260704-cbgf4aas5w
SHA256 20139724a2be4ee978d05c14037fbde89d37bb90c485f13ac5713f240d176494
MD5 1f58ba53735d6d1c79e70995536b7b3c
SHA1 4b33e91c312584c6854d8d376fa039a322078eec
SHA512 8fe8e8c9b5eaa8704d6b0cda90e27756223d2d7c450d4b82987dd1f0d0a08b02434161299a543acd18ec615ce1172bf5441a257bd4cc39992ec26254ac685879
SSDEEP 786432:yoN/kVog8WLh4C+xOMYRaQm3lmhVIp4JZTvDMBasMRyNRCftRar2aMFVgDza:yqSJV4C9MHQym3IqJZbDIas+ye3a6NeS
TLSH
T1EDA7333A4CB6B31164DEC64386CFA9CA45DCBD74D4EE4888E5E2D1D3F8635D9808BB81
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

pyinstaller

Malware Config

Targets

- Target
  Occ'xDDoS.rar
- Size 42.7MB
- SHA256 20139724a2be4ee978d05c14037fbde89d37bb90c485f13ac5713f240d176494
- MD5 1f58ba53735d6d1c79e70995536b7b3c
- SHA1 4b33e91c312584c6854d8d376fa039a322078eec
- SHA512 8fe8e8c9b5eaa8704d6b0cda90e27756223d2d7c450d4b82987dd1f0d0a08b02434161299a543acd18ec615ce1172bf5441a257bd4cc39992ec26254ac685879
- SSDEEP 786432:yoN/kVog8WLh4C+xOMYRaQm3lmhVIp4JZTvDMBasMRyNRCftRar2aMFVgDza:yqSJV4C9MHQym3IqJZbDIas+ye3a6NeS
- TLSH
  T1EDA7333A4CB6B31164DEC64386CFA9CA45DCBD74D4EE4888E5E2D1D3F8635D9808BB81
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

pyinstaller
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2
- Target
  Occ'xDDoS/Occ'xDDoS.bat
- Size 43.2MB
- SHA256 2e28f928298dd00b3ef9e9a73f9319a7acc4ea964017e6755fd1edc8e904dd60
- MD5 d3cc6cc99822a79657439b0cd583c734
- SHA1 4d508f28140e546f19184accf19cc2049d3a36d2
- SHA512 aaa5824bfc4962d944c200ae60af08fb45d4224e13fb87bd4374f4525509bc0e31d2588d63744dcff7b277674f7938488287b39f4022d6572be4b5d8665e3051
- SSDEEP 786432:b+gX4BMdhwzTQXR5FbPp6FcSS5U/LT2KzVyPVLBdRH/v8Eb4PCz8SewOSS:FXGMK4XR3bLSCU/+6yPl3RH/EEb4PCIv
- TLSH
  T175A73310E5D406CCFAF50A7CA192CB06E318F8AF53A2C6E641F4019359B7FD06A57EB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Loads dropped DLL
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral3 behavioral4
- Target
  21.pyc
- Size 18KB
- SHA256 6c4393207f45208667ff2e95ccd6f244f258e2f73dcd1065f989de921ccd515d
- MD5 d23b5ad1a176cc6a5bae2ba2d80bcdcb
- SHA1 7d18392dcea5ff467c1bda1245b76f7555c5c07e
- SHA512 6294e019e685d87701c861eea6765621f433b2a3a95f1944b5927828ee62c22047d3b2ef4603efcb9e1d77a294ef6705d3ca33aacf7adb8454b76142274c857f
- SSDEEP 192:bAiiOXwvUUlScBAJtRdUGLDPtIe+dH7A8FxEOAPuGJBcswPQXKK:bBwNScBADRGGXy1MOAPuS+swPQaK
- TLSH
  T19C824AE7C5018415FFB4E0F750D05280A75EAD23B520E393B60E42B4ADDF76AE9B1388
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral5 behavioral6
- Target
  Occ'xDDoS/requirements.txt
- Size 29B
- SHA256 204d0b3e9ac7f72e7b0c8206e23aec15c7552f81f4ff92b0a7ad6ad5238f3ab1
- MD5 e45556f3ee2d516d1868dd844c8a0880
- SHA1 3b0bbb13624ad1430981ad3be611c5d568dedcd9
- SHA512 2c64973644655eb53208db5afb775802e2feffd39c03180c55052b3f6f76b88fd9502127ea12218be32d7f6df339beea976520a3fb54f54c36a74f4597ed59c6
- MD5 SHA1 SHA512
Score

1^/10
behavioral7 behavioral8
- Target
  Occ'xDDoS/runner.bat
- Size 206B
- SHA256 6055741ed5aef6139333b6506176adc80344740abf4c7a685ae7410311abd566
- MD5 d55939e78c15cf7e28e5aee671e3033c
- SHA1 65bae0e083ea80c53f7d724eb0ea0c12e9766776
- SHA512 db6f659abe438aac822b879608b4364a9a489be9f267a8bb56ce446991bc1b720bc79de5034ec0af181b851f5f8642b1864833d6619649d5ba65bf5b85d892ca
- TLSH
  T186D022093391D3FA78053DCA88BB8803344AF61763812902F17B01BC6CD0482A239D2A
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10 behavioral9

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Loads dropped DLL

Contacts third-party web service commonly abused for C2

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10