Resubmissions
04/08/2026, 23:47
260804-3sxshsfr5w304/08/2026, 23:04
260804-22egvsaa97331/07/2026, 17:14
260731-vsb7tadh36331/07/2026, 17:11
260731-vqg1aaytfw312/03/2026, 03:10
260312-dpeebsh19n329/01/2026, 19:45
260129-ygsxzaev6d311/01/2026, 07:29
260111-jbnnqsdy3d310/01/2026, 20:51
260110-znejlafx7f310/01/2026, 20:12
260110-yy59maes4d310/01/2026, 19:43
260110-yfn8dscy5d3Analysis
- max time kernel
898s - max time network
477s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-es - resource tags
- submitted
31/07/2026, 17:14
General
- Target NyanDDoS.exe
- Size 1.0MB
- Sample260731-vsb7tadh36
- SHA256 b990cb67ed4e182319908c7969833db566027daf6c2256159f3b0ce19f50c0bc
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\NyanDDoS.exe"C:\Users\Admin\AppData\Local\Temp\NyanDDoS.exe"1⤵
- System Location Discovery: System Language Discovery
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5456-0-0x0000000074232000-0x0000000074233000-memory.dmp
memory/5456-1-0x0000000000550000-0x0000000000660000-memory.dmp
memory/5456-2-0x00000000055C0000-0x0000000005B7A000-memory.dmp
memory/5456-3-0x00000000050A0000-0x0000000005132000-memory.dmp
memory/5456-4-0x0000000005050000-0x000000000505A000-memory.dmp
memory/5456-5-0x0000000074220000-0x00000000749DC000-memory.dmp
memory/5456-6-0x0000000074220000-0x00000000749DC000-memory.dmp
memory/5456-7-0x0000000074232000-0x0000000074233000-memory.dmp
memory/5456-8-0x0000000074220000-0x00000000749DC000-memory.dmp
memory/5456-9-0x0000000074220000-0x00000000749DC000-memory.dmp
memory/5456-10-0x0000000009B00000-0x0000000009C02000-memory.dmp
memory/5456-11-0x0000000074220000-0x00000000749DC000-memory.dmp
memory/5456-12-0x0000000074220000-0x00000000749DC000-memory.dmp
memory/5456-13-0x0000000074220000-0x00000000749DC000-memory.dmp
memory/5456-14-0x0000000074220000-0x00000000749DC000-memory.dmp
memory/5456-15-0x0000000074220000-0x00000000749DC000-memory.dmp
memory/5456-16-0x0000000074220000-0x00000000749DC000-memory.dmp
memory/5456-19-0x0000000074220000-0x00000000749DC000-memory.dmp
memory/5456-20-0x0000000074220000-0x00000000749DC000-memory.dmp
memory/5456-21-0x0000000074220000-0x00000000749DC000-memory.dmp
memory/5456-22-0x0000000074220000-0x00000000749DC000-memory.dmp