Resubmissions

07/09/2026, 10:30

260907-mj3z6ssxbs8

07/09/2026, 10:08

260907-l588msgc2210

07/09/2026, 10:04

260907-l39fmastf16

07/09/2026, 09:55

260907-lya29sssgv6

General

  • Target
    Device Policy_155.42.0 (10658120).xapk
  • Size 15.5MB
  • Sample260907-l588msgc22
  • SHA256 c376512737887aa6acb9217c9542227470fb7aea772c6406b4adb46d56e9dbe0
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Device Policy_155.42.0 (10658120).xapk
    • Size 15.5MB
    • SHA256 c376512737887aa6acb9217c9542227470fb7aea772c6406b4adb46d56e9dbe0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Modifies visibility of file extensions in Explorer

    • Modifies visibility of hidden/system files in Explorer

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v16

Tasks