Resubmissions

09/11/2026, 22:11

261109-14aq1sv1hy3

08/11/2026, 16:43

261108-t8pmeasvbz3

08/11/2026, 16:06

261108-tj9ahsdv813

06/11/2026, 12:54

261106-p5p2jsbw2z3

06/11/2026, 12:52

261106-p4h7lscx8n3

03/11/2026, 02:20

261103-csn79sgz2l3

03/11/2026, 01:34

261103-bzerqsx1hx3

26/10/2026, 15:46

261026-s75rkatx4q3

04/08/2026, 23:47

260804-3sxshsfr5w3

04/08/2026, 23:04

260804-22egvsaa973

Analysis

  • user interaction
    yes
  • max time kernel
    898s
  • max time network
    903s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-es
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-eslocale:es-esos:windows10-2004-x64systemwindows
  • submitted
    04/08/2026, 23:04

General

  • Target
    NyanDDoS.exe
  • Size 1.0MB
  • Sample260804-22egvsaa97
  • SHA256 b990cb67ed4e182319908c7969833db566027daf6c2256159f3b0ce19f50c0bc
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\NyanDDoS.exe
    "C:\Users\Admin\AppData\Local\Temp\NyanDDoS.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1368

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/1368-0-0x0000000000BA0000-0x0000000000CB0000-memory.dmp

        memory/1368-1-0x0000000005B40000-0x00000000060E4000-memory.dmp

        memory/1368-2-0x0000000005590000-0x0000000005622000-memory.dmp

        memory/1368-3-0x0000000005750000-0x0000000005760000-memory.dmp

        memory/1368-4-0x0000000005560000-0x000000000556A000-memory.dmp

        memory/1368-5-0x0000000005750000-0x0000000005760000-memory.dmp

        memory/1368-6-0x0000000005750000-0x0000000005760000-memory.dmp

        memory/1368-7-0x000000001E320000-0x000000001E422000-memory.dmp