96019b704570bad3825cecfecdf8c9154951959a5a551f65e442e4968bd2e29e

Resubmissions

06/08/2026, 17:21

260806-vxa6babc238

06/08/2026, 17:17

06/08/2026, 17:16

06/08/2026, 17:14

06/08/2026, 17:13

06/08/2026, 17:11

Sharing

Copy URL Twitter E-mail

General

Target
net10.0-windows.zip
Size 1.7MB
Sample260806-vxa6babc23
SHA256 96019b704570bad3825cecfecdf8c9154951959a5a551f65e442e4968bd2e29e
MD5 3538138e3f603d81f2bf422ea8549b46
SHA1 71c192eede26f04b4d05b381d328418b2fdd383d
SHA512 94f7c5138c3c3b4f42747082f35e7dc2dabfd45f3c514e8503c39c35ac788752f8ebae8fe2544a88b77d911e9052157e0a4d745de8018936d96dee1e07e41624
SSDEEP 49152:JCLhPGguJ1bmiSEWoCZijrttftmUM+YAt:JCLhP+PyE6S5tFK+X
TLSH
T1DF8533409A1EE1ADBE0F4DBE336FFD810441855D9D2D226E485FEDCA02B358AE789F11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  net10.0-windows.zip
- Size 1.7MB
- SHA256 96019b704570bad3825cecfecdf8c9154951959a5a551f65e442e4968bd2e29e
- MD5 3538138e3f603d81f2bf422ea8549b46
- SHA1 71c192eede26f04b4d05b381d328418b2fdd383d
- SHA512 94f7c5138c3c3b4f42747082f35e7dc2dabfd45f3c514e8503c39c35ac788752f8ebae8fe2544a88b77d911e9052157e0a4d745de8018936d96dee1e07e41624
- SSDEEP 49152:JCLhPGguJ1bmiSEWoCZijrttftmUM+YAt:JCLhP+PyE6S5tFK+X
- TLSH
  T1DF8533409A1EE1ADBE0F4DBE336FFD810441855D9D2D226E485FEDCA02B358AE789F11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  net10.0-windows/Discord.Net.Commands.dll
- Size 135KB
- SHA256 8dab23ef022069952fa35f148ce7f0ce57290db1b748bb732b52dcde6682e5b8
- MD5 f015a6a771da52c49e7e968efa9090cf
- SHA1 7df4393204514ed52f019cc1ffd443ce24748576
- SHA512 5e8ef20a4c8889d7e296947aa72aec4cb5343147c476ad5da729eccbcf3af533cb64c661fc6a9c14e5900401c14ca4cc35f0b05200657dd6e08c92892f5c2fc1
- SSDEEP 3072:Mzh7Jdvy+EvKQMdwoZpGyA1e3jYVby9zDAwH:8KzKQloZpGyAkt9zDAw
- TLSH
  T1B9D35C35A3EC4B23CAAF77B9F46000250BF9A609E96EF749AD5CB8ED184670059507F3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  net10.0-windows/Discord.Net.Core.dll
- Size 939KB
- SHA256 de6d06fbb00f66c9f33a1d47788971ea2101564a2ba391628d96f486f697e71d
- MD5 449ec1225066e3e5385ec99166f33d48
- SHA1 b207f4e9601ce52d7090f4933f91ceb63627fcab
- SHA512 3fd85e525c888cb1957256ac37cf57a279e07c979b12445405a8879086b7c8d79b4ad94a2b78fd68640bbf4f5619a29cb168d0b7f331f67b80f64d902bcad783
- SSDEEP 12288:YR12gKvlGOzzFhDq/2yCuaap58aO0cscwiYyAvgvu1znGOWWi4iYyJ6hsTwh6Fsw:YRQjbzzrO/2yC7
- TLSH
  T1E815864022F4593EF9FBCF37967AA451267ABEFA1950D60E0944744E087EB8288D0F77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  net10.0-windows/Discord.Net.Dave.dll
- Size 30KB
- SHA256 eaea4dc9929f331022d02838356e35c57ac901701dc8bc7bbf50489f3e034747
- MD5 69825d8317c6cf6ca9ab41b5394e1b6d
- SHA1 ec59282abca5da8da01a9d7e734afe5c265326d6
- SHA512 8c35901ab8045b88b792b829512ffd60f401e0d3acbb5f5b27c2289deb85840e34b6762a1c8f76a7ecefc2958e2b0901d785b6f1918ad9fe8482abbad97cf405
- SSDEEP 384:9K3Yce+rEjvzfskyj3U/fMbV4JPrHD3jiwJGEEC6eCHKEZL:ge+6vzfskk2oUPbPKZL
- TLSH
  T1B2D23B22D24ACB3AEE8D46F9CC3047915BBAC2CD7493FB191B8CB28519677C02D592D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  net10.0-windows/Discord.Net.Interactions.dll
- Size 299KB
- SHA256 97bd12f30109a6a152927fb495b655f835b5513e6e3658e34d2babbb552f022b
- MD5 0938c182fa327b4cf80a5cf5c5d4e259
- SHA1 ff8c06a41634e92eb79c8f8776efb0c347b8e771
- SHA512 6f6f893db9ca5c2a0cf063598ffb2635057aad5898df79229c580f7c9fe40f9b30be6c1afe6da1aaa179baef803df637a4191392c3513db8d39c6cfa0bb04bb0
- SSDEEP 3072:8wK7QmtJAoKylXjpBO86xZ8J1k0cofFKhRStX6b52R+uox0lrXbbCY6x5AqGdfDP:8hTAoLlXjpBy8J1kugo6b5fuoylra
- TLSH
  T1B2546B4123F84721EAEF1732F574502987FAE686E86EE31C8D6CECE8D957740858076B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  net10.0-windows/Discord.Net.Rest.dll
- Size 1.5MB
- SHA256 f667c2de228bb9858accb1f05c048a601d04025aa1bef8eb8ddc67b9dde0f710
- MD5 8a3961113cd4072257a4fc0413d076f6
- SHA1 218a45921afd2e6253d109d9770373c069023428
- SHA512 3ccc8aa58e36f0a6c5f7df1b5f6aba11a36199d36430dc380521712d4ba60bd4031ab9cbb8ee36c0f39eece0e23aba0dbe39c23590cdf5963f7f16832c397ae1
- SSDEEP 24576:UBMJHlI3/xSPWJWRNCCfr7OWnEtOPE5K01FtIXP:UBbcPCjC+WnWK01Fk
- TLSH
  T1767509177AA89B35C15F2635D06C01699773AEC4A3A3A75F0F2CABF56C4A3478C091B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  net10.0-windows/Discord.Net.WebSocket.dll
- Size 962KB
- SHA256 e06004911e9fed8f648873f1c5141fec1ccc33bf3b2ce553375b2212c4242b88
- MD5 74e8253febee8579b1ea7c7c79b4d36e
- SHA1 3128b5aa2fc89281d729370d58b4869b82ac958f
- SHA512 6ac22e2ca43f682330eb48e8b140e89dd0260f7c541ec160166bdf02d3186a6541aa4fd28073a77c241026742bc3ded1f8ecc6ffaeec412deefae2103c6b69f4
- SSDEEP 24576:A5lhCzZLs6JACo0LO/4m4sKT7EkvGTzYD6HwoyZe1GTibIJQm5uoQLNJdxeqdAkS:ApCzZLs6JACo0LO/4m4sKT7EkvGTzYD1
- TLSH
  T11E255B473368CE36C1AF75F8A971866947E2D606A25EE30A925CFBC83C423574D806F7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  net10.0-windows/Discord.Net.Webhook.dll
- Size 31KB
- SHA256 f9742e5b8b227621c9686219dd8fd80dfbfea50507961e75e2342661bb5e2545
- MD5 79cf0caeb009d24f9c4236aba06de341
- SHA1 e6d658c218b0d0a452c785b73b021bd065d69ab4
- SHA512 8ef6b4d87e9a8af662a8385885fc0603b152003631bd9998c45ba85cd7e0aff07d5b767de38325c17aa8a9ddec50653be2c5c9a702d416c5082b78b5c2b4d05e
- SSDEEP 768:nwURE2ig0US4qfhkuqXfwg+pUJS5qXpdZp:wURN0US4Gk6ZpOHdZp
- TLSH
  T143E2281813ACC72ADAFF67B9F470121907B2EE456413FB491D4DAAED1953BC22604BE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  net10.0-windows/Microsoft.Extensions.DependencyInjection.Abstractions.dll
- Size 64KB
- SHA256 7c97c4463fe0fc11d1f22f4d160b2bd2288981adf1de2717a6ff3fb993ddf294
- MD5 92c2a8739405ff35658a3b59f74f5f09
- SHA1 88f1e6774964c7bfdf058190d7c61c0ec4a1fdae
- SHA512 5c02c366996695ccefc926369dfd538bd4f2365dd42f2afb701b63f9c16a48d3813a0d79c9b6bcc10d00f6ce10aca97974c331491ca3d12bc261aeec048c378b
- SSDEEP 1536:cuu+NbA5+iU5t53Ueb4I+FXEsEiWzBFn3MzZ:+4tkXEsL6f89
- TLSH
  T1D1531A2437F9E623DBBE4A7137E64281AB78EF037501FB0F254692F90447BC949909B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  net10.0-windows/Newtonsoft.Json.dll
- Size 706KB
- SHA256 a28c251dfe36d881e9e2462e171441b8b0ec156fe3f452602c9149b1b9efe05b
- MD5 c252fe44b67a08e6dab4eade3764db49
- SHA1 fcf801c0915cb47f400c74b1b459eb55ff4a5f9d
- SHA512 40656f812e273cd828b41ec58cba21dfe0cab186b8f5847744602005a9ba7caf1267729af8d37a420ea26f50221dcda85cc9695019a83f271fb81b6c32afc9c8
- SSDEEP 12288:BJJdZj8K4VopGZ5kYNkx8mJ0YHlyGBty0PJxqDo+3:B1J8xNe8MBBty06
- TLSH
  T159F46B0533E8CB2AE5EF6775B4314A1547F6F41AA2B2E74F6904A5ED0D83BC09D40BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  net10.0-windows/murbackup bot.deps.json
- Size 6KB
- SHA256 b8c437f77b4f347c1d7a1f831244b85b521adb0421c219dc8ae653175223bd4b
- MD5 18ab3017cdfd69c99e66393da1f650ae
- SHA1 e48f8b8dbcd94d25ec7ee122b94f7fa16a050883
- SHA512 b4871437d6257bc9d17f31511e7adb1e5edcc4bb3a1a21da6d0ffc861fce4c2e4b7a81cbb816538fb538bba6982014ec384e136d65da18606287573fff6584fd
- SSDEEP 96:tvru3ci90DHhPwbnSTdiotzt+G9k1UGczO/8Ib4LBQDzh:tv0S59OPh
- TLSH
  T1C7E1882AC0A42D3316B1E7F5693D1245F325432F6009988B7CFE6D6C8F76B9AA081F75
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11
- Target
  net10.0-windows/murbackup bot.dll
- Size 207KB
- SHA256 89ff881b0bb77bfad9251d418d72f38804e4764c04448b3ca3fb893dc87b5cdc
- MD5 423fc347fafd144b24c6fa0529489a40
- SHA1 8cd9ec609c5c3a4695972a439c3b56e9a1ebe1c8
- SHA512 f9dfc71e3d195d3cc3b342062b7a2b0c5da0ba91218a0c5ffe247ab7ad22898a54e051809e30913387b206df29e208206baf6fb2c5ad03411b167b74f36ee43e
- SSDEEP 3072:K7L8DtX4ReCXp8Exm8W9QkFkzAM528JLuNZVLDykgb1nGZSt6v:K7hXCDQkFkzL5IZVPAd6
- TLSH
  T12624292462F88E35F66F1BF5A4654365C7BA2207F62DF74D0E18F8EE2C927828512353
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  net10.0-windows/murbackup bot.exe
- Size 163KB
- SHA256 88011142d6de2d2a9cc0f9cad6c6dfd7e7933cadae63499a7d6725378b9d5c2e
- MD5 38bade02ffde396a1c4b55f866daa482
- SHA1 61bca1023fce3889276c8fbb2bc5d50b8340ebe4
- SHA512 4b324b68b0ad00fc184a364c9911924a68e08e0a5b96730c5254f2c0546a772cb49a8d1d97abcd8a959e5eb7fe2df2e39a482f18102e4cbe7914a5ff491ceedf
- SSDEEP 3072:aVDxk88wN1xL+x7dL1Z9QnlP97E3swm9uzaAT5Ah:uRax7F1nQnhcUJr
- TLSH
  T13DF34C13A66810BEE1B7D679C9928901FB72785947B1B7CF03604EB60F76BD09E39302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery
- Downloads MZ/PE file
behavioral13
- Target
  net10.0-windows/murbackup bot.pdb
- Size 74KB
- SHA256 0002e62e474e22557fbff73b1f89863af2319a3d6388ad692a6ac1c39f8b64a5
- MD5 70349e382311231042a8d76e172d87ca
- SHA1 ca542f945a4c17408a208ee83c71e35e59bf4eea
- SHA512 fa9cd478e40814e53b90f2081bb72c0d205e279656425be80f46d4e11b2c928b1a0cac46a7cc68c07fb77581152241a5ff42358e4f717803a5e713d3778f90ee
- SSDEEP 1536:SyssdEBfV3YYXYF22/39+gZAtSUTgWcy8gYFa3/EPRKLK:NssdEDG2u+R5TojgsPh
- TLSH
  T1C373191BC785CF19C7A2017354B783986334C264EA46CF57A2D97628DCABBE40F771A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral14
- Target
  net10.0-windows/murbackup bot.runtimeconfig.json
- Size 447B
- SHA256 039a0defb81019310fa2e8a17ef8d2ad086b1a37656149aa598f1f75893f2a22
- MD5 b451096fec6028f9acbd24badac69055
- SHA1 d7d2be96751913015927effb0d58b0ac1d3fd839
- SHA512 cb3e5230de93c3fed5cf8165107de145c613655fbda729e604419a80e3a51431ceaf4e30c92a71fb73a8ffe2c713bd95f8f34abad7e12d0f1bc692fc9886d490
- TLSH
  T141F0222ACA100DA308B973BAD62AC182FF30432B20141956B5FC081C2FB3A611100F99
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery execution
behavioral15

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

T1553

SIP and Trust Provider Hijacking

T1553.003

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Downloads MZ/PE file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15