Overview

overview

7

Static

static

3

RawSpoofer...er.exe

windows10-2004-x64

7

RawSpoofer...er.exe

windows11-ltsc_2024-x64

7

backend.pyc

windows10-2004-x64

3

backend.pyc

windows11-ltsc_2024-x64

3

Resubmissions

08/08/2026, 17:03

260808-vk7zhsvxbv8

08/08/2026, 17:00

260808-vh3a9aee377

Sharing

Copy URL Twitter E-mail

General

  • Target
    RawSpoofer-v1.0-win64.zip
  • Size 13.6MB
  • Sample260808-vh3a9aee37
  • SHA256 8d9950e415359e3647f39861e8673855d9b592965c368bd1377afbaafa662008
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
executionpersistencepyinstaller

Malware Config

Targets

    • Target
      RawSpoofer-v1.0/RawSpoofer.exe
    • Size 13.9MB
    • SHA256 363c4772170c341c33d3f65cc8b23ce850cecd54ac2345f1a73e06ac91dc6c54
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    executionpersistence

    • Loads dropped DLL

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    behavioral1behavioral2
    • Target
      backend.pyc
    • Size 37KB
    • SHA256 a7e6b7d252c87f25ddb03b33cd6022d5f93640f338d163389365d196524f4a91
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral3behavioral4

MITRE ATT&CK Enterprise v16

Tasks