Resubmissions

11/08/2026, 16:18

260811-tsb2dawfjc8

11/08/2026, 16:17

260811-trkbcsttct8

General

  • Target
    support.client.exe
  • Size 305KB
  • Sample260811-trkbcsttct
  • SHA256 eed03a1e011650d505e7fc11aa99f8043ec23ef5d606e7933e2a7c9fc89613b5
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      support.client.exe
    • Size 305KB
    • SHA256 eed03a1e011650d505e7fc11aa99f8043ec23ef5d606e7933e2a7c9fc89613b5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Downloads MZ/PE file

    • Manipulates Digital Signatures

      Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to make their binary seem validly signed.

    • Signed with revoked ConnectWise certificate

      Binary is signed using a ConnectWise certificate revoked for key compromise.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks