Resubmissions
04/08/2026, 23:47
260804-3sxshsfr5w304/08/2026, 23:04
260804-22egvsaa97331/07/2026, 17:14
260731-vsb7tadh36331/07/2026, 17:11
260731-vqg1aaytfw312/03/2026, 03:10
260312-dpeebsh19n329/01/2026, 19:45
260129-ygsxzaev6d311/01/2026, 07:29
260111-jbnnqsdy3d310/01/2026, 20:51
260110-znejlafx7f310/01/2026, 20:12
260110-yy59maes4d310/01/2026, 19:43
260110-yfn8dscy5d3Analysis
- max time kernel
898s - max time network
464s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-es - resource tags
- submitted
04/08/2026, 23:04
General
- Target NyanDDoS.exe
- Size 1.0MB
- Sample260804-22egvsaa97
- SHA256 b990cb67ed4e182319908c7969833db566027daf6c2256159f3b0ce19f50c0bc
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\NyanDDoS.exe"C:\Users\Admin\AppData\Local\Temp\NyanDDoS.exe"1⤵
- System Location Discovery: System Language Discovery
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1128-0-0x00000000748E2000-0x00000000748E3000-memory.dmp
memory/1128-1-0x00000000008A0000-0x00000000009B0000-memory.dmp
memory/1128-2-0x0000000005AF0000-0x00000000060AA000-memory.dmp
memory/1128-3-0x0000000005530000-0x00000000055C2000-memory.dmp
memory/1128-4-0x00000000054C0000-0x00000000054CA000-memory.dmp
memory/1128-5-0x00000000748D0000-0x000000007508C000-memory.dmp
memory/1128-6-0x00000000748D0000-0x000000007508C000-memory.dmp
memory/1128-7-0x00000000748E2000-0x00000000748E3000-memory.dmp
memory/1128-8-0x00000000748D0000-0x000000007508C000-memory.dmp
memory/1128-9-0x00000000748D0000-0x000000007508C000-memory.dmp
memory/1128-10-0x000000000A070000-0x000000000A172000-memory.dmp
memory/1128-11-0x00000000748D0000-0x000000007508C000-memory.dmp
memory/1128-12-0x00000000748D0000-0x000000007508C000-memory.dmp
memory/1128-13-0x00000000748D0000-0x000000007508C000-memory.dmp
memory/1128-14-0x00000000748D0000-0x000000007508C000-memory.dmp
memory/1128-15-0x00000000748D0000-0x000000007508C000-memory.dmp
memory/1128-16-0x00000000748D0000-0x000000007508C000-memory.dmp
memory/1128-19-0x00000000748D0000-0x000000007508C000-memory.dmp
memory/1128-20-0x00000000748D0000-0x000000007508C000-memory.dmp
memory/1128-21-0x00000000748D0000-0x000000007508C000-memory.dmp
memory/1128-22-0x00000000748D0000-0x000000007508C000-memory.dmp