Resubmissions

24/08/2026, 02:45

260824-c8vd8axwfx10

24/08/2026, 00:15

260824-aj78nswzes

23/08/2026, 23:38

260823-3mnmnabm7w8

General

  • Target
    20260824 1.img
  • Size 4.4MB
  • Sample260823-3mnmnabm7w
  • SHA256 8b141a7c5d8af94ed37ea2b5dd676f9cb105ba8a6eedda36349899a2f1d065ff
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      20260824.EXE
    • Size 911KB
    • SHA256 5d8d20ab8008d5e8cd6ff7b44273fc4a13d30e97d1c7b295aa0786da7ac1f9e3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Drops file in Drivers directory

    • Sets service image path in registry

      This determines the executable launched when a service starts. It can be used to establish persistence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      MSOCF.dll
    • Size 2.3MB
    • SHA256 04c9eae9f19a63e4a84da108fe6b768ab6e558c89126dbb6c35a0c383739a81f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Drops file in Drivers directory

    • Sets service image path in registry

      This determines the executable launched when a service starts. It can be used to establish persistence.

    • Executes dropped EXE

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      msvcp100.dll
    • Size 411KB
    • SHA256 d769fafa2b3232de9fa7153212ba287f68e745257f1c00fafb511e7a02de7adf
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      msvcr100.dll
    • Size 755KB
    • SHA256 60c06e0fa4449314da3a0a87c1a9d9577df99226f943637e06f61188e5862efa
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks