Overview

overview

8

Static

static

3

bot.pyc

windows10-2004-x64

3

bot.pyc

windows11-ltsc_2024-x64

8

Resubmissions

14/08/2026, 14:21

260814-rpexrawand8

14/08/2026, 14:09

260814-rgdpqawthv7

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-08-14_230631fde82406f37265349a35d987f3_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
  • Size 69.7MB
  • Sample260814-rpexrawand
  • SHA256 2127bb87059126fe89286255dcce28429a008eca5cf3319e43b9b211d1048ee9
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwarediscoveryexecutionpersistencepyinstallerspyware

Malware Config

Targets

    • Target
      bot.pyc
    • Size 9KB
    • SHA256 4323a62bdcfa3be6e9d96da65465029af76822e1568955f5db126bad0a16e10d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    discoveryexecutionadwarepersistencespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks