Resubmissions

06/08/2026, 16:05

260806-tjkl6aah4310

06/08/2026, 15:54

260806-tcc9hayzaz10

General

  • Target
    4.zip
  • Size 53.0MB
  • Sample260806-tjkl6aah43
  • SHA256 3bf159f2b056a17bc4ee9e9507580e9cf27cb93b7f4f5bd58a4430c672624bb2
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Language
  • ps1

Deobfuscated
Source
URLs
  • exe.dropper

    https://github.com/adoptium/temurin8-binaries/releases/download/jdk8u422-b05/OpenJDK8U-jre_x86-32_windows_hotspot_8u422b05.msi

Targets

    • Target
      4.zip
    • Size 53.0MB
    • SHA256 3bf159f2b056a17bc4ee9e9507580e9cf27cb93b7f4f5bd58a4430c672624bb2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Drops file in Drivers directory

    • Loads dropped DLL

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v16

Tasks