Overview

overview

10

Static

static

5

10-22 Fina...nt.exe

windows10-2004-x64

10

10-22 Fina...nt.exe

windows11-ltsc_2024-x64

10

winhttp.dll

windows10-2004-x64

10

winhttp.dll

windows11-ltsc_2024-x64

10

Resubmissions

29/10/2026, 08:28

261029-kdcjxsxz7j5

28/10/2026, 09:16

261028-k8eyjaby3q10

28/10/2026, 08:47

261028-kp4sjsyw4p10

27/10/2026, 08:43

261027-km19msda9510

Sharing

Copy URL Twitter E-mail

General

  • Target
    10-22 Financial Statement_8f7a.iso
  • Size 454KB
  • Sample261027-km19msda95
  • SHA256 6b345ed9e4de9894d29905842457934e3c2dd468a466443e2fac55ba66d94456
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
valleyrat_s2backdoor

Malware Config

Extracted

Family

  • valleyrat_s2

Version

  • 1.0

C2

  • 8.215.33.249:5252

Attributes
  • campaign_date

    20261021

Targets

    • Target
      10-22 Financial Statement.exe
    • Size 25KB
    • SHA256 de0b9b6656c9e9fc9db4271610a09c2ae27d07c5a4757e94b2e0314a9dda6ee4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    backdoorvalleyrat_s2
    behavioral1behavioral2
    • Target
      winhttp.dll
    • Size 376KB
    • SHA256 3a194dbc100b082ac4208ab5d970e44c8a801f8610e744efedaf4bcd6fcf2025
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    backdoorvalleyrat_s2
    behavioral3behavioral4

MITRE ATT&CK Matrix

Tasks