13ef376d6bdb898f723d0e350faa7e872794962746be392df381a36f7a8509c2

Resubmissions

30/08/2026, 20:39

260830-ze9clsdb448

30/08/2026, 20:34

260830-zcqsgshj6y4

Sharing

Copy URL Twitter E-mail

General

Target
2zbtfvddfwb7
Size 5KB
Sample260830-ze9clsdb44
SHA256 13ef376d6bdb898f723d0e350faa7e872794962746be392df381a36f7a8509c2
MD5 362b3feffc4e4e4e300e926a6a348dce
SHA1 9ec776f90c7af5fc723baa29798f9f21da4b6f8d
SHA512 dbe55f61f4ce11772a5c34f0aec85a63da942f908bb57d8f8e9a4f0bb2f300ee7bb0bdb5e35e105ca31bf9ec7fd46a905405079b3d70e83111f2fb253d8fd50d
SSDEEP 96:PNy9toXZzIEb0EaW87v4Op7hGs62M8fUFoLC9Qb6IYLIUKgY5UYzueh84gHmw:PNctkCBQOp7hGs6luUP9QtuI1759yWg9
TLSH
T159C129F3E97190A257E79B5510F7738CE320B549FA01909AE091CA7CD2EFF4B80051C8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery

Malware Config

Targets

- Target
  2zbtfvddfwb7
- Size 5KB
- SHA256 13ef376d6bdb898f723d0e350faa7e872794962746be392df381a36f7a8509c2
- MD5 362b3feffc4e4e4e300e926a6a348dce
- SHA1 9ec776f90c7af5fc723baa29798f9f21da4b6f8d
- SHA512 dbe55f61f4ce11772a5c34f0aec85a63da942f908bb57d8f8e9a4f0bb2f300ee7bb0bdb5e35e105ca31bf9ec7fd46a905405079b3d70e83111f2fb253d8fd50d
- SSDEEP 96:PNy9toXZzIEb0EaW87v4Op7hGs62M8fUFoLC9Qb6IYLIUKgY5UYzueh84gHmw:PNctkCBQOp7hGs6luUP9QtuI1759yWg9
- TLSH
  T159C129F3E97190A257E79B5510F7738CE320B549FA01909AE091CA7CD2EFF4B80051C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery
- Downloads MZ/PE file
- Executes dropped EXE
- Probable phishing domain
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Phishing

T1566

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Downloads MZ/PE file

Executes dropped EXE

Probable phishing domain

Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2