Resubmissions

12/08/2026, 11:58

260812-n5fbnswejb10

12/08/2026, 11:53

260812-n2aa9awdmg6

12/08/2026, 11:48

260812-nygk6acd748

12/08/2026, 11:39

260812-nsqxmstsas10

12/08/2026, 11:34

260812-npl5aafp2s10

12/08/2026, 11:31

260812-nmzycscd233

12/08/2026, 11:28

260812-nk3apswaqc7

12/08/2026, 11:24

260812-nhvsvafm817

12/08/2026, 11:20

260812-nfwmcsvhpe6

12/08/2026, 11:15

260812-ncmkaasydz6

General

  • Target
    https://github.com/Endermanch/MalwareDatabase/blob/master/fakescanners/%E3%81%82%E3%81%AA%E3%81%9F%E3%81%AE%E3%82%B3%E3%83%B3%E3%83%94%E3%83%A5%E3%83%BC%E3%82%BF%E3%81%AF%E3%83%96%E3%83%AD%E3%83%83%E3%82%AF%E3%81%95%E3%82%8C%E3%81%A6%E3%81%84%E3%81%BE%E3%81%99-1.zip
  • Sample260812-nfwmcsvhpe

Malware Config

Targets

    • Target
      https://github.com/Endermanch/MalwareDatabase/blob/master/fakescanners/%E3%81%82%E3%81%AA%E3%81%9F%E3%81%AE%E3%82%B3%E3%83%B3%E3%83%94%E3%83%A5%E3%83%BC%E3%82%BF%E3%81%AF%E3%83%96%E3%83%AD%E3%83%83%E3%82%AF%E3%81%95%E3%82%8C%E3%81%A6%E3%81%84%E3%81%BE%E3%81%99-1.zip
    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Enterprise v16

Tasks