b7671aaca39c821afaa606046358968646ab093079bfeebc4469988d5f3ee6b8

Resubmissions

23/08/2026, 02:23

260823-cve3dadn6y

22/08/2026, 22:44

260822-2nssbscn3z5

Sharing

Copy URL Twitter E-mail

General

Target
xxx.rar
Size 56.2MB
Sample260822-2nssbscn3z
SHA256 b7671aaca39c821afaa606046358968646ab093079bfeebc4469988d5f3ee6b8
MD5 82d1e6037b7e885f2d8e5445a429232c
SHA1 df71d0dbbccc41ea1a7dbde7b4e68657c19d8576
SHA512 c8b96cf4388dccfc88739d1efb91d7a30b3830769e47b945aa9eebe96ca1a50b4916e6176d58d89209c17e6178400b7617ee2722b2633163d9c042a247f42bab
SSDEEP 1572864:bEiF9AO6huYkGKOlMrhvRvE1zTKmYYhVo3MzYWJ:bph6fkGHI/4z2mYYm4bJ
TLSH
T1A2D712F192D129FE5D92C8AFF083D8719E47481AA45851D3A8F1AD1EE621FF223E5037
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution

Malware Config

Targets

- Target
  xxx/xxx/active_simulations.json
- Size 106KB
- SHA256 a99a3387dc21913687eee82f747c5f59075ef734152016e877e89d8fbafbfd72
- MD5 2c129ee39d6a7baa8b338160e23d0e23
- SHA1 baa5622a03d004737d983d77a479a98e713d4335
- SHA512 86b9974170a902e0e58382136a4d61d78e0f19f26f2d13d8805667f743e986ef77e1619fc768346046b944154aa62ead6a695b66a31b431e67d5fbd0def28b43
- SSDEEP 1536:AcTC3ELGVWbHq+YxkIDXpMNR8Nv0fpzE/+2jPcjYj:bC3OGQKlxlemm9Ed
- TLSH
  T114B3FE1BFC70BC77157B5327AC390714F1A0034F121C096F7ABCE54E5FB52AAA54AA2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1
- Target
  xxx/xxx/background_image.jpg
- Size 10KB
- SHA256 76d6a1dace345cbb00bc106a77c883ecc6c5de8b8fcf83b9b9fb26cfed4f4fd6
- MD5 7c29b38200b3f0c731b6a470cf742043
- SHA1 272547a5d2a82cfdcbf7abc43c57cc1e252bf8f9
- SHA512 4f42c02f71af8fc051d2e72d935b27ad478bd2e00e59ae65deab64ec54b2b7213d7218405e7772e98dbf305ac09f7ca82f82a28ef9779b6e6f88589078af5575
- SSDEEP 24:tDcIhpKN0o0XxDuLHeOWXG4OZ7DAJuLHenX3bvp:lcNuERAD
- TLSH
  T19F32FE1A6B021F50DCD384B65C03C256DFCE668D36D3230E197341A3F900BF5590C66C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  xxx/xxx/bitrefill_state.json
- Size 9KB
- SHA256 f67a34a301f35448adfcb0031d4fca77d46fe7139155fca7e537a18ba356dacb
- MD5 774fa6d5b82e030e5e818399b09c2911
- SHA1 da13983d3528c882785a00a8bbb2d6e142f3399b
- SHA512 7924cab39d44151eaa1d94f6ae94dd29db074cb73887e484a2df3184f0e3d13e3d9b45d5e893aeb45da8bbc07d7f5698ed7b910fb6d997552a32b35fee7f1bf9
- SSDEEP 192:9G+hd4wSInqB8mF+2OfBpefGKsnnvCqyYkzRw4V66JEL/MBFlw/T9:7QInNmFkfZKsnvjA9vJOMu9
- TLSH
  T13512A6793710E81353E967FDD51A27F8179D9799C10A19CA35BF65CC892E72EF4C8002
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3
- Target
  xxx/xxx/coinbase_state.json
- Size 124B
- SHA256 3379b9fbb48df4f6b028da609028fbc59e509cef66477032077f84034785fce4
- MD5 cc1bdb61292406b034a1c640c1f35d2d
- SHA1 fdbe1d7c9156d6105c31b76bab0c10e748f0ad87
- SHA512 82ab689dbe4ea209a1298f044a1752d8f4fc6334c399304799b135d3dc4cbf976118897829f9d4dbaa6f08e3285195fad772215bba662db370466f909d1fe577
- TLSH
  T145B09228261292B10BF6B005AAAAA053C8368F6584B24C3B32F380380A0330B2597B02
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral4
- Target
  xxx/xxx/config.json
- Size 3KB
- SHA256 396d7e06daf1cf60bac1bd8944d3839ebf2d4e1d8ad618762772a52f3090ace9
- MD5 9c4eaab74ff3c3e1e7a08fac859a0586
- SHA1 1e20c51d33c9322398079f5e3020133eacba353b
- SHA512 32255da43ccbc35e51983dbf514c1efb76fbaa3300cc47bc7fa29a2c31d178dfc21d24828cb19b2b25f4b4576ac868b06a21e7be75ef5a0fa677e93eb58a209c
- TLSH
  T121517926D5258D2360B9938E3AB12B4AF651F31F08845E2F71FD584D9FB6BA1C084B1E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5
- Target
  xxx/xxx/eth_pending.json
- Size 58KB
- SHA256 312544bbc69f67de933d824ab8ad86ef9f7d433ee3d7d144751499fcdc92b8a3
- MD5 e490950fe6700800591dd8f7d090e7a4
- SHA1 e6aae6ffd6ece7a1d04fb7de2d2c126062ff962a
- SHA512 10d780c3af568d0870d28a18e04c5bc9d26be5371d3e27a1dd47a4ddfdd86b36c5c426169ce9c813b6ecbc5bcd8d327fa6653c9f91fd9d656fc6e75ff6041810
- SSDEEP 1536:09+g5WS8jwWoExv2Sba+TAVliJHqA5VAyrFLwmIgVypWcXvMM:09+gJixOSba+EVlq0yrFLwmIggpWcXvn
- TLSH
  T1F4432E22F5500C97D1FA136AA8793756F121379F80D20DAB70F5A28D2FB1A23D613DDA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral6
- Target
  xxx/xxx/exoproxy.exe
- Size 1.1MB
- SHA256 fdb1243b879b277fe43ab6e8c29e42c84f5566ba3310db2b4212a4e29a4110a7
- MD5 3cbee2ebe46ddf4672bf1cda21cf5e71
- SHA1 96d0400c778d2e19314b6d40f18c737fc23c4e02
- SHA512 046b2bb4df068ab3cbd8b668cdd4816480f6011bf407657eaf437012a4b7a309ad9f0e3137de65768611f74a2ab89e0f3add7b7954065c50147557479aa7ca69
- SSDEEP 12288:+bs/m0E54jwaFXGc8lEBBBHGBKq2IZwDOvfqItNqdg:+bOVE5ifGPRZwivf3fd
- TLSH
  T161357C83E7A385D8C116C9B5534BF137F9627C8E4B157197ABC41E633A67BA4E22CB00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  xxx/xxx/mitmproxy-ca-cert.p12
- Size 1KB
- SHA256 3d99f5fbc2af4d8e2dba4edb4aad416405c0a5b722085dc57ad09c12b0a6e218
- MD5 de75b3d849e7122ae7e3fa55f0c692a3
- SHA1 7f94d1660c544e43d8dae7b7a5638e1b71e241ca
- SHA512 2db4ec154f540de8ec29af9d61ee54a739fd9461dbe410cef9ca3abe3f13c236f38df55bd51a95d986eb29670526c0b1284b88b6659e0c544130b0a2049a18f4
- TLSH
  T16911359DDE7D6804BC139D4D597CAF3336746BF40E61A807B93150D94C2974578C500C
- MD5 SHA1 SHA512 TLSH
Score

5^/10
- Drops file in System32 directory
behavioral8
- Target
  xxx/xxx/shuffle_state.json
- Size 80B
- SHA256 89cfc69c0df37a0f2aff980fa2672b90ce474944ca192c91136833117eaeea8a
- MD5 4c2caf47948a738ffa89bb34abd59cd1
- SHA1 34310703d6fae510d11175fc5e3b230af238b865
- SHA512 528d9aa7c834e98d4015ef7d92835be2ad93fe13113be8a06a38ce1384e23f69ebfb30f6f6653c606922ea810f8b2f3808e35a6847e6fedcc649546d59a2be67
- TLSH
  T16DA00134AA119AEAE7A5EA20583C30139624B594C0DAC03A2A50486A2A6E925E645591
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral9
- Target
  xxx/xxx/shufflecom_state.json
- Size 6KB
- SHA256 ae315f9ba0cdf92be1f6b27600883a6ec878df0b8ad722b2470e4f6f0e7950fb
- MD5 4909f89ac9f1ceea63d9ebd2a6f7549a
- SHA1 7edb3e7e3671fbd33fe2f935ebdf41e90e9fa960
- SHA512 79dfcdd0d5b1bc5b76e08c28815b8e83ff9d2e6bf48433514b74955c9242c707d2c43dd5f6c07810694b6908664fe9ba5206588ca31d15db957bce557fa0c098
- SSDEEP 192:sjWhuJMT7w4mawvH/TCtoOVXs1ysHh6mw:umma8H0oOV8x8t
- TLSH
  T124D1DC2BE010DC97ADF521E2E9640778F208639FC1410ECBB5FE5ACC5F75523B686A19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10
- Target
  xxx/xxx/simulator_debug.log
- Size 1019.2MB
- SHA256 8fc523236625348150f6b9eb39a899d451f9c48c79b7c30a85b5c6dc3dd0a210
- MD5 3f714f576d0cd3950ed63e16ea03ece7
- SHA1 eef9b732b3cbf36f1e8973d20643b105150f6825
- SHA512 c342caf43a4a258b2743fb8edea44dd802a2988764d1cd19592212beae76079252536c0b5634ffe4acd30e2a44b8371b5468715f6ebee555d9e57fbef36c8752
- SSDEEP 49152:tkLNeLQFwfVqerqRCD7IjmLOIHc5IPHS7Up1yWR:v
- TLSH
  T17DB9C29681BF70B36FE7538DC93A4D582D8733958B410CD9BB5488893CDCB5ACBA7806
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11