Resubmissions

19/08/2026, 22:13

260819-145w6avbkd7

19/08/2026, 22:10

260819-13g4psvbjd

19/08/2026, 22:02

260819-1x4eravamf7

General

  • Target
    NMSSaveEditor.zip
  • Size 66.5MB
  • Sample260819-145w6avbkd
  • SHA256 f57c2979ee6a498cd7d38d9587b23d5308023b113494043626732a1aa366e6cc
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Targets

    • Target
      NMSSaveEditor.zip
    • Size 66.5MB
    • SHA256 f57c2979ee6a498cd7d38d9587b23d5308023b113494043626732a1aa366e6cc
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      NMSSaveEditor-4G.bat
    • Size 178B
    • SHA256 8c6d48baa19942f238869f2f0c33afad1658f4982e9c683ed77ed55fe4319e05
    • MD5 SHA1 SHA512 TLSH
    Score
    7/10
    • Loads dropped DLL

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Target
      NMSSaveEditor.bat
    • Size 169B
    • SHA256 eab682ec4396f40a49fef91b403993d592926aee93234e38aca6595a1c6e5b10
    • MD5 SHA1 SHA512 TLSH
    Score
    7/10
    • Loads dropped DLL

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Target
      NMSSaveEditor.jar
    • Size 67.3MB
    • SHA256 ef898af4e1c4c0c25a6c6529dfea52520cda243383544d8d358ad10aae3a178c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Loads dropped DLL

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Target
      README.txt
    • Size 489B
    • SHA256 3bd61e15af99fdc4afa64402f758deaa76048aec3590fd1d4e02fb8ff6047a37
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10

MITRE ATT&CK Enterprise v16

Tasks