cdc9044dc6c281dd393a6f29bb87ba7c313adb6f282384754a37aec4a5f12cfd

Resubmissions

10/09/2026, 20:42

260910-zg6dqsgn5t8

10/09/2026, 20:40

260910-zfw4nswbqb7

10/09/2026, 20:40

260910-zft93sgn3x

10/09/2026, 20:38

260910-ze8q3swbph3

Sharing

Copy URL Twitter E-mail

General

Target
Proton Drive Download - 2026-09-10.zip
Size 5.7MB
Sample260910-zfw4nswbqb
SHA256 cdc9044dc6c281dd393a6f29bb87ba7c313adb6f282384754a37aec4a5f12cfd
MD5 025d89f71ed633bb54ac0101761965fe
SHA1 126e77c6a4c8f0dc36b8f013aa17ead58940e5dd
SHA512 ac78b67f5101f1b069f22d29caf927669ffa0b8c03717e33e77e0a242c9285336e0767062d7ee79c6986463c43b1f4d1e2c68c3dd56cb7a59062c633d9b2d927
SSDEEP 98304:hRDMtsP/Mw/zM76IEeKilLyUb3wAGiGupuQflJbj+8Fc4sOZor8dopq3Wu/nQTGc:h8y9MAeJ73bCusQfru8FOXcjmuPQTzD9
TLSH
T10C5612107591D071E572813336BADBB1197DB9304B1228DBB7C81FAEAE602CE7A35B17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Malwarebytes Keygen By IIIOH#3837.exe
- Size 276KB
- SHA256 df8244a8d8b8f979b5e221c9ab247a8dd72876317be903de80ac02079152ce36
- MD5 d59223a436ff1c8b6923b816fd1f3d77
- SHA1 8e5ca6f88ea22e0d082083f7e5edd803cf8d4a80
- SHA512 3213ccad1a288416e6a3fe01a65ed9faaeff896c640806d5d348942e67e0ec84bbf3384680d54d36db6b7df1f8d7a933bf63ce584f55a511c3e16be6e6c8a3de
- SSDEEP 6144:U/iUjZrwnsbcvjClducFnDq8zOgyVrB7qTixwYBD086QXhaasQuPVZ7o:8Fcn/JcFnD5IOixnDd6S7sQoVZ7o
- TLSH
  T16A54AE1175908471D872157605F4EBB1AB3DBD304FA689CB67D40F7FAF302C2AA35A2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2
- Target
  Qt5Core.bin
- Size 446KB
- SHA256 2a23d76da72eb1da45bb3d2d4072f8fdfac25f21d5de12ebc5c7f50bdc14a695
- MD5 ca29d55d7bebded2c9972374eeee216c
- SHA1 338a907f742468fcbfb02396d8a5690f383d99fd
- SHA512 8c0bb7e01cd31657603485f644bf7c01188670b8568254209573156a4fd7e1dd040a722b9b72812a27632f6b7c343341f371b26cdd96cf5148dfe32a0a6c0383
- SSDEEP 6144:ignVfzt3lAkJ5ASAUVX3BOMkhdGC20CqFODCPUDeTyoPqxlyIZhJO:nLt3lzDxOMgr2woCP9TTU/34
- TLSH
  T184A42B1475B2D0B1E165C173361BDBB059697434972338EBB7842BA81C606CEBBBBB13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  nssdbm3.lib
- Size 4.7MB
- SHA256 e86255a656d7508dbf09ef79a2a588b11f94f2a9468747202aa9d50d440ec89e
- MD5 a06b11f0dd19ba72a61989e08cde676e
- SHA1 6fcbeaa2edd5874e858a1ced7dc052db32b591a7
- SHA512 5d181ea5813cee52ca80cfe564dc30c27617a9877e3e53215077ba21ebedd150bcb663a528a656525af4efe092fbd5739ae854cb3c93f7f69c8649f25f72014e
- SSDEEP 98304:u/Mw/zM76IEeKilLyUb3wAGiGupuQflJbj+8Fc4sOZor8dopq3Wu/nQTGBVIDCa:Q9MAeJ73bCusQfru8FOXcjmuPQTz
- TLSH
  T1F63633C5B8C1CC76E4BA123505E1D63525BDB9738712195B6EDD0E2ABFB26C13838C2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral5 behavioral6
- Target
  Malware.pyc
- Size 2KB
- SHA256 f7d788caf29ed9173992cada253c24cbfb2c621aead65833981854715bd7d261
- MD5 3d53be18c86e977670bc430a7d6c897a
- SHA1 cfa166ee3230eb43a5dc44b045c42fab5f119401
- SHA512 788498c8798dd269054b54f59c4ae3264c9793b6e61ea6de13ad0d83d1ba0976227a8410e5f1ad85feaf9884009dc21aaa87a5ca1782d29c2154a30e96b3839d
- TLSH
  T10D510E756CF113956EE1A162B07AF89C631617D4BBFC0209F0CC3C85BEBA914B7916C2
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  vccorlib140.dll
- Size 300KB
- SHA256 c687ddc0feab7a72e4a68dd2bb795ad5ad3b4f1175e7987bcafafceff44e970d
- MD5 13098a24a02cdf3c9973de85d29e98c5
- SHA1 07637ade03755e860094d5c174e555b7802fbd63
- SHA512 8271e18987593a4fb8269ee3b8d66afe904a29309e3a585375d819a4ca980b46ed9d11b6856e9edf8d6de95e1f6a6d8639fbf5b4cddbecd6f06fff136308fb28
- SSDEEP 6144:q0M13u/abFV5X55WxbtOj4rG4//ng0eqqt7T/hWV:q0MJuihV5XexbtOj4rR/eb/hq
- TLSH
  T109644B20B242E036F9A34472AFFDCAA9552CB9300F5614D7B3C85FEEDE645D5A63070A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10