Resubmissions

24/07/2026, 14:56

260724-sba73ssepe10

24/07/2026, 14:54

260724-r96k7sfr2w10

General

  • Target
    25538275458.zip
  • Size 9.2MB
  • Sample260724-sba73ssepe
  • SHA256 30edfd19705e02d1e1c3156fe871180ce4d5c46270c78b3e63b8c0442494b35e
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      wsvcz/WinRing0x64.sys
    • Size 14KB
    • SHA256 11bd2c9f9e2397c9a16e0990e4ed2cf0679498fe0fd418a3dfdac60b5c160ee5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      wsvcz/u230126.dat
    • Size 12.1MB
    • SHA256 e777774e4f3bb0c31ec56516e4be23502712d15701db83642ee799b658c11946
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      wsvcz/u731368.exe
    • Size 6.2MB
    • SHA256 63aa8da1aedb07d075c13f700877a7525df5b4f434c5f24026a77365517cb225
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Enterprise v16

Tasks