Resubmissions

04/08/2026, 23:47

260804-3sxshsfr5w3

04/08/2026, 23:04

260804-22egvsaa973

31/07/2026, 17:14

260731-vsb7tadh363

31/07/2026, 17:11

260731-vqg1aaytfw3

12/03/2026, 03:10

260312-dpeebsh19n3

29/01/2026, 19:45

260129-ygsxzaev6d3

11/01/2026, 07:29

260111-jbnnqsdy3d3

10/01/2026, 20:51

260110-znejlafx7f3

10/01/2026, 20:12

260110-yy59maes4d3

10/01/2026, 19:43

260110-yfn8dscy5d3

Analysis

  • user interaction
    yes
  • max time kernel
    898s
  • max time network
    903s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-es
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-eslocale:es-esos:windows10-2004-x64systemwindows
  • submitted
    04/08/2026, 23:04

General

  • Target
    NyanDDoS.exe
  • Size 1.0MB
  • Sample260804-22egvsaa97
  • SHA256 b990cb67ed4e182319908c7969833db566027daf6c2256159f3b0ce19f50c0bc
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\NyanDDoS.exe
    "C:\Users\Admin\AppData\Local\Temp\NyanDDoS.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1368

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/1368-0-0x0000000000BA0000-0x0000000000CB0000-memory.dmp

        memory/1368-1-0x0000000005B40000-0x00000000060E4000-memory.dmp

        memory/1368-2-0x0000000005590000-0x0000000005622000-memory.dmp

        memory/1368-3-0x0000000005750000-0x0000000005760000-memory.dmp

        memory/1368-4-0x0000000005560000-0x000000000556A000-memory.dmp

        memory/1368-5-0x0000000005750000-0x0000000005760000-memory.dmp

        memory/1368-6-0x0000000005750000-0x0000000005760000-memory.dmp

        memory/1368-7-0x000000001E320000-0x000000001E422000-memory.dmp