Resubmissions

01/08/2026, 03:21

260801-dwct3swhnc7

01/08/2026, 03:17

260801-ds446awgqh7

General

  • Target
    https://www.up-4ever.net/njfhfs8im9y3
  • Sample260801-dwct3swhnc

Malware Config

Targets

    • Target
      https://www.up-4ever.net/njfhfs8im9y3
    • Indirect Command Execution

      Adversaries may abuse utilities that allow for command execution to bypass security restrictions that limit the use of command-line interpreters.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks