Resubmissions

05/07/2026, 23:40

260705-3ntkasgt2w10

05/07/2026, 23:39

260705-3nlvfsgs911

General

  • Target
    IMG_7516.jpg
  • Size 3.2MB
  • Sample260705-3ntkasgt2w
  • SHA256 1ba5168bac0b9b8a1d743912f1da27863e383b29d5417efa1f8511bcb1dbe2c3
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • onyxc2

C2
  • computezlweb.wiki

Attributes
  • port

    443

  • url_path

    /7e243e2b5c5ds7he/backend/api/app.php

Targets

    • Target
      IMG_7516.jpg
    • Size 3.2MB
    • SHA256 1ba5168bac0b9b8a1d743912f1da27863e383b29d5417efa1f8511bcb1dbe2c3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: OnyxC2

      OnyxC2 is a Windows backdoor written in C++.

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

MITRE ATT&CK Enterprise v16

Tasks