ef376c0c13d42e1473770db48cf63ed5b8707b2081f25564089cc70c8f56fffe

Resubmissions

25/09/2026, 17:58

260925-wknrbasgpb7

25/09/2026, 17:58

260925-wkgm1atx4q7

25/09/2026, 17:39

260925-v8my9afh537

Sharing

Copy URL Twitter E-mail

General

Target
IttihadBomber.exe
Size 628KB
Sample260925-wknrbasgpb
SHA256 ef376c0c13d42e1473770db48cf63ed5b8707b2081f25564089cc70c8f56fffe
MD5 68b9182d4714c5f67b4bbf1e45590888
SHA1 9bc9d0310b75e12dae570de6e4e385536164f9b3
SHA512 3873594c662ad9455f1918120f54262c4bfb04888944c80731e31c474c357c403a47761a8368d3461eee037811b0d5deb74f72beaa8813260b3fe10f45529e0a
SSDEEP 6144:jtYHseBhgviIaGfC7eMGtSi5tFAjI/SqAg8m5xA+eykyCWtqDuV+iiI/LRFD+MSX:jePhgr5qGVAjIaqAg8GxPTyW0D8FyMQ
TLSH
T1B7D48D0E3359AD34D892F63433F4A6B70B3D5AAF5A03D209F6657A7E1D2B810A75138C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  IttihadBomber.exe
- Size 628KB
- SHA256 ef376c0c13d42e1473770db48cf63ed5b8707b2081f25564089cc70c8f56fffe
- MD5 68b9182d4714c5f67b4bbf1e45590888
- SHA1 9bc9d0310b75e12dae570de6e4e385536164f9b3
- SHA512 3873594c662ad9455f1918120f54262c4bfb04888944c80731e31c474c357c403a47761a8368d3461eee037811b0d5deb74f72beaa8813260b3fe10f45529e0a
- SSDEEP 6144:jtYHseBhgviIaGfC7eMGtSi5tFAjI/SqAg8m5xA+eykyCWtqDuV+iiI/LRFD+MSX:jePhgr5qGVAjIaqAg8GxPTyW0D8FyMQ
- TLSH
  T1B7D48D0E3359AD34D892F63433F4A6B70B3D5AAF5A03D209F6657A7E1D2B810A75138C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery persistence
- Loads dropped DLL
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- Drops desktop.ini file(s)
behavioral1 behavioral2 behavioral3 behavioral4

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Loads dropped DLL

Contacts third-party web service commonly abused for C2

Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4