Resubmissions

20/08/2026, 11:50

260820-nz4r3swdkd10

20/08/2026, 11:45

260820-nwrncawcqe10

20/08/2026, 11:41

260820-ntntnswcnb10

General

  • Target
    installer_japper.bat
  • Size 1KB
  • Sample260820-ntntnswcnb
  • SHA256 3f3cc7d9f714d6aaec33ec87e152c1fb86824d65342957a5ac018708ba37520a
  • MD5 SHA1 SHA512 TLSH

Malware Config

Targets

    • Target
      installer_japper.bat
    • Size 1KB
    • SHA256 3f3cc7d9f714d6aaec33ec87e152c1fb86824d65342957a5ac018708ba37520a
    • MD5 SHA1 SHA512 TLSH
    • Modifies Windows Defender DisableAntiSpyware settings

    • Modifies Windows Defender Real-time Protection settings

    • Stops running service(s)

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Command and Scripting Interpreter: PowerShell

      Start PowerShell.

MITRE ATT&CK Enterprise v16

Tasks