Resubmissions

31/07/2026, 09:47

260731-lr6wcszepb8

30/07/2026, 22:43

260730-2ne68s1zgt6

30/07/2026, 22:23

260730-2askea1xcv6

General

  • Target
    hitfx.rpf
  • Size 25.0MB
  • Sample260731-lr6wcszepb
  • SHA256 11edf5844263ce01e83f395623fb53ca105cc911dcbf65269b8da2a194b790b9
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      hitfx.rpf
    • Size 25.0MB
    • SHA256 11edf5844263ce01e83f395623fb53ca105cc911dcbf65269b8da2a194b790b9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v16

Tasks