Resubmissions

24/08/2026, 02:42

260824-c622aacm2v10

24/08/2026, 00:15

260824-akdepabf658

General

  • Target
    20260824 2.img
  • Size 2.2MB
  • Sample260824-akdepabf65
  • SHA256 810e53107d0c6ced27f5f957d30981f5640c62b930bf4e30c9028b73b06c5cca
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      20260824.EXE
    • Size 911KB
    • SHA256 5d8d20ab8008d5e8cd6ff7b44273fc4a13d30e97d1c7b295aa0786da7ac1f9e3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Drops file in Drivers directory

    • Sets service image path in registry

      This determines the executable launched when a service starts. It can be used to establish persistence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      MSOCF.dll
    • Size 123KB
    • SHA256 ad755d2dfeaa23b80d561656848d12d8e66edd99b1169d63a936fe7b01da57ab
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Drops file in Drivers directory

    • Sets service image path in registry

      This determines the executable launched when a service starts. It can be used to establish persistence.

    • Executes dropped EXE

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      msvcp100.dll
    • Size 411KB
    • SHA256 d769fafa2b3232de9fa7153212ba287f68e745257f1c00fafb511e7a02de7adf
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      msvcr100.dll
    • Size 755KB
    • SHA256 60c06e0fa4449314da3a0a87c1a9d9577df99226f943637e06f61188e5862efa
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks