Resubmissions

07/11/2026, 23:02

261107-2z89fsgd798

07/11/2026, 23:01

261107-2zq3waf12w8

07/11/2026, 22:36

261107-2h7z3afy7x8

07/11/2026, 22:12

261107-14vfesss5p7

General

  • Target
    ONLYOFFICEDesktopInstaller.exe
  • Size 1.0MB
  • Sample261107-2z89fsgd79
  • SHA256 d9e0d2295c976371a5b07be66c9b6814c7440a87d104fa7430583aa61fb2e59d
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      ONLYOFFICEDesktopInstaller.exe
    • Size 1.0MB
    • SHA256 d9e0d2295c976371a5b07be66c9b6814c7440a87d104fa7430583aa61fb2e59d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v16

Tasks