Resubmissions

20/09/2026, 17:22

260920-vxwf9aywhv3

20/09/2026, 13:34

260920-qvch5sxgla10

20/09/2026, 13:16

260920-qht8eshp2t8

20/09/2026, 13:15

260920-qhe4havv9m3

19/09/2026, 18:55

260919-xkx6esah2610

19/09/2026, 14:02

260919-rclvjagb458

18/09/2026, 21:57

260918-1t1jpaem4t5

17/09/2026, 23:03

260917-21wpraea2410

17/09/2026, 22:30

260917-2e5erszeje8

17/09/2026, 14:01

260917-rbx66sef728

General

  • Target
    https://github.com
  • Sample260920-qht8eshp2t

Malware Config

Targets

    • Target
      https://github.com
    • Downloads MZ/PE file

    • Executes dropped EXE

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks