Resubmissions

06/07/2026, 12:36

260706-psyg6aa17m10

06/07/2026, 12:29

260706-pn7v2afs2z8

06/07/2026, 12:26

260706-pmgbpae16z4

General

  • Target
    https://ebooklibres.com/ir/?t=d&isbn=9788492672998
  • Sample260706-psyg6aa17m

Malware Config

Extracted

Family
  • onyxc2

C2
  • computezlweb.wiki

Attributes
  • port

    443

  • url_path

    /7e243e2b5c5ds7he/backend/api/app.php

Targets

    • Target
      https://ebooklibres.com/ir/?t=d&isbn=9788492672998
    • Family: OnyxC2

      OnyxC2 is a Windows backdoor written in C++.

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v16

Tasks