Resubmissions

26/10/2026, 22:52

261026-2tpymaw12m5

26/10/2026, 22:49

261026-2rv2vshy7l5

General

  • Target
    RithmicPatchAtas.exe
  • Size 5.5MB
  • Sample261026-2tpymaw12m
  • SHA256 771073f13bb576854d1a57ff545b1e6da217d147d08101b8da57b3e25a4e5fae
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      RithmicPatchAtas.exe
    • Size 5.5MB
    • SHA256 771073f13bb576854d1a57ff545b1e6da217d147d08101b8da57b3e25a4e5fae
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Executes a VBScript file via the Windows Script Host.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks