Resubmissions

12/07/2026, 03:55

260712-egynnscx8l10

12/07/2026, 03:50

260712-eeb2wsex5z10

12/07/2026, 03:46

260712-ebtsjacx4q10

General

  • Target
    Kane Loader.com
  • Size 34.8MB
  • Sample260712-ebtsjacx4q
  • SHA256 cfd84355012f8e81c197a79ac9fe78809232ce408690eeceb7382f5c5bb21cfa
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Kane Loader.com
    • Size 34.8MB
    • SHA256 cfd84355012f8e81c197a79ac9fe78809232ce408690eeceb7382f5c5bb21cfa
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Deletes NTFS Change Journal

      The USN change journal is a persistent log of all changes made to local files used by Windows Server systems.

    • Modifies firewall policy service

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks