Overview

overview

10

Static

static

1

hseo.js

windows11-ltsc_2024-x64

10

Resubmissions

14/07/2026, 16:20

260714-ttcdjagt3q3

14/07/2026, 16:18

260714-tr2kmsaz6v10

Sharing

Copy URL Twitter E-mail

General

  • Target
    Quarantined Messages.zip
  • Size 7KB
  • Sample260714-tr2kmsaz6v
  • SHA256 eccdf5879c8060bd9d1df35572ffe24ecd5aac006230fc95c4de962a61df89a6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
adwaredefense_evasiondiscoveryexecutionpersistenceransomwarespyware

Malware Config

Targets

    • Target
      hseo.php
    • Size 21KB
    • SHA256 3b3798004936c137513b5468257e30fa2ce9bba77f5b5f284b3697561286cd15
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    adwaredefense_evasiondiscoveryexecutionpersistenceransomwarespyware

    • Modifies visibility of file extensions in Explorer

      defense_evasion

    • Modifies visibility of hidden/system files in Explorer

      defense_evasion

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks