Resubmissions

09/07/2026, 22:49

260709-2rx68aav8p

09/07/2026, 22:48

260709-2rl4ysbx411

09/07/2026, 22:45

260709-2pgrfsav6r6

General

  • Target
    ArmouryCrateInstaller.exe
  • Size 4.0MB
  • Sample260709-2pgrfsav6r
  • SHA256 8139b87231d99cac36bfed7a4974c8086a9c32dd5fe15f4775f476f54f586b4c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10

Malware Config

Targets

    • Target
      ArmouryCrateInstaller.exe
    • Size 4.0MB
    • SHA256 8139b87231d99cac36bfed7a4974c8086a9c32dd5fe15f4775f476f54f586b4c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Probable phishing domain

MITRE ATT&CK Enterprise v16

Tasks