General

  • Target
    21072026_1548_20072026_005755_ORD_FOR_2026-ORD.F-0001761.rar
  • Size 1.8MB
  • Sample260721-s82raszcjf
  • SHA256 590d8454ed423a5d69110881decddc2bc70d0a3cd27d841810c461dbedfc7771
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Targets

    • Target
      005755_ORD_FOR_2026-ORD.F-0001761.exe
    • Size 3.4MB
    • SHA256 ae8e7ad14dec25f2ba87cae1510fbba1b46de9d24e967ad92eacc5217301e9c3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    • Windows security bypass

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Windows security modification

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

MITRE ATT&CK Enterprise v16

Tasks