Resubmissions

19/08/2026, 19:15

260819-xyftas1erf10

19/08/2026, 19:12

260819-xwpy7agm8s10

General

  • Target
    Voidstrap.exe
  • Size 150.8MB
  • Sample260819-xyftas1erf
  • SHA256 665e8f173ff04cc9a3bd57ff2d9b26a7d4fbf4b2cf98e0d76a6e5e806639a3cb
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Voidstrap.exe
    • Size 150.8MB
    • SHA256 665e8f173ff04cc9a3bd57ff2d9b26a7d4fbf4b2cf98e0d76a6e5e806639a3cb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Loads dropped DLL

    • Adds Run key to start application

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Target
      rat_final.pyc
    • Size 213KB
    • SHA256 a179f15979351059498b53ba3adf09ebcaa0651475968106eaa66b69f0bc0b29
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks