Resubmissions

02/10/2026, 15:16

261002-snnnyatbng8

02/10/2026, 14:33

261002-rw458a1apg8

02/10/2026, 13:07

261002-qc213syxcy8

01/10/2026, 19:54

261001-ymr8max18l3

General

  • Target
    pi-windows-x64.zip
  • Size 45.7MB
  • Sample261002-rw458a1apg
  • SHA256 84d46dd580671560a11236ef659c21bd18a3f94b881731396702ca28339c27d4
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      docs/custom-provider.md
    • Size 24KB
    • SHA256 76296f7c035f19cfd805da133ecc924e9c8098136d8f9caed151977e71b0e6d5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      docs/rpc.md
    • Size 34KB
    • SHA256 9ecca993da292b99fb77af2574b3cb34d6c205db1b34a0b8ae55a73488786186
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      docs/sdk.md
    • Size 32KB
    • SHA256 3fce371c61b62d5b88834e1530a9d6003d227cf39258505e7ea8eab4d3b707f2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      examples/extensions/auto-commit-on-exit.ts
    • Size 1KB
    • SHA256 b89b5cb4c6f1f07b0b4291ab85a3c5f025d7d31ebb285821716502452b46af62
    • MD5 SHA1 SHA512 TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      examples/extensions/border-status-editor.ts
    • Size 4KB
    • SHA256 52f62fc2efd94a2f89464ec95b2e46445b61f5df6632b2767fceb9148ab3264a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      examples/extensions/built-in-tool-renderer.ts
    • Size 8KB
    • SHA256 cfbe8f9b0904f9d4de295ea136ce45fc71f207ca98583807efd8ccb0d1d6b940
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      examples/extensions/custom-compaction.ts
    • Size 4KB
    • SHA256 2ce2fb96e4f6bf9dd67e7173a79505d9448eef31bb35800ac661f123378c8338
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      examples/extensions/custom-footer.ts
    • Size 2KB
    • SHA256 1e5f17bec95a48d407fbcc092faf7e1f6021c30cee4a66ec09bc120412292cb2
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      examples/extensions/custom-provider-anthropic/index.ts
    • Size 18KB
    • SHA256 b3dd63bf6395485b5ac1b43f5553699251e2c66b400eb52ffcb11ff86deb07ed
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      examples/extensions/custom-provider-gitlab-duo/index.ts
    • Size 11KB
    • SHA256 f533ae371df6bc19506d16479c6d8076dbce77bada6c96185557d71eb7886241
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      examples/extensions/doom-overlay/doom-component.ts
    • Size 3KB
    • SHA256 d95dc47c92db0fdc5b0e0b56a277c67f277012d3f7296df745d8a93f64d5a42e
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      examples/extensions/doom-overlay/doom/build.sh
    • Size 3KB
    • SHA256 ab09c9b6dc98ea7c1fa8e74c13981ce69b698c01aec77309c5c7d40ad114d38c
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      examples/extensions/doom-overlay/doom/build/doom.js
    • Size 63KB
    • SHA256 c3147cf4881c88b4210c017c26828f52aff83f0c4db27d7dad3fe6cda9ade1fb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      examples/extensions/doom-overlay/index.ts
    • Size 2KB
    • SHA256 f89818dd75c7d8970458b1dbb9c5e85fea9b86534fd740c898c1f6f9c9f9ceba
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      examples/extensions/git-merge-and-resolve.ts
    • Size 4KB
    • SHA256 a3c077c87544122abe83b275f3d527f60c80c87f460ea2499d66bde9b4880133
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
3/10

behavioral1

execution
Score
3/10

behavioral2

execution
Score
3/10

behavioral3

execution
Score
3/10

behavioral4

execution
Score
3/10

behavioral5

execution
Score
3/10

behavioral6

adwareexecutionpersistenceransomwarespyware
Score
8/10

behavioral7

execution
Score
3/10

behavioral8

adwareexecutionpersistenceransomwarespyware
Score
8/10

behavioral9

execution
Score
3/10

behavioral10

adwareexecutionpersistenceransomwarespyware
Score
8/10

behavioral11

execution
Score
3/10

behavioral12

execution
Score
3/10

behavioral13

execution
Score
3/10

behavioral14

adwareexecutionpersistenceransomwarespyware
Score
8/10

behavioral15

execution
Score
3/10

behavioral16

execution
Score
3/10

behavioral17

execution
Score
3/10

behavioral18

adwareexecutionpersistenceransomwarespyware
Score
8/10

behavioral19

execution
Score
3/10

behavioral20

execution
Score
3/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10