Resubmissions

11/07/2026, 07:44

260711-jlbrxsfz2z7

11/07/2026, 07:08

260711-hypnwafw8v7

General

  • Target
    Messenger.msi
  • Size 19.9MB
  • Sample260711-hypnwafw8v
  • SHA256 b597846dd8da1852a2a5a5f9600fac60918c7ede3d52e89d4d47f40b519055b7
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Messenger.msi
    • Size 19.9MB
    • SHA256 b597846dd8da1852a2a5a5f9600fac60918c7ede3d52e89d4d47f40b519055b7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks