Resubmissions

24/10/2026, 17:13

261024-vrvyjacy8r9

24/10/2026, 17:08

261024-vn1plsfd379

General

  • Target
    new.exe
  • Size 127.1MB
  • Sample261024-vrvyjacy8r
  • SHA256 a7aa1338f3f01f4736a2780234f3c0629448e9afa80b9d86090be40ba0c5f83a
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      new.exe
    • Size 127.1MB
    • SHA256 a7aa1338f3f01f4736a2780234f3c0629448e9afa80b9d86090be40ba0c5f83a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Adds Run key to start application

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

    • Modifies boot configuration data using bcdedit

MITRE ATT&CK Enterprise v16

Tasks