Resubmissions

28/07/2026, 22:48

260728-2rbm8abl3w10

28/07/2026, 22:37

260728-2jv2wsbj7v10

28/07/2026, 22:32

260728-2fxfjsxglc10

27/07/2026, 21:38

260727-1hkdbs1hrd10

General

  • Target
    REAL_hd.any_MiniRedir.bin
  • Size 7.7MB
  • Sample260728-2fxfjsxglc
  • SHA256 0794db73759ee87450b45bde86b7ecc226e97f4dfd7cce528c975f4a4f695fcb
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      REAL_hd.any_MiniRedir.bin
    • Size 7.7MB
    • SHA256 0794db73759ee87450b45bde86b7ecc226e97f4dfd7cce528c975f4a4f695fcb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • A potential corporate email address has been identified in the URL: [email protected]

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks