Derp.ca
← All malware

2e3c70ccbb3cbcc2b08baefac78edcf24503149e0e8c2990b75597c7ec21a52f

Live Scan Result: Tria.ge
Score
10/10

Threat Level

Known Bad

Malware Family
Valleyrat S2

Last Seen Feb 27, 2026

BackdoorInstallerDefense EvasionDiscoveryExecutionExploitPersistencePrivilege EscalationUpx

MITRE Behavior Map

Execution (TA0002)

  • PowerShell (T1059.001)

Persistence (TA0003)

  • Windows Service (T1543.003)
  • Netsh Helper DLL (T1546.007)

Privilege Escalation (TA0004)

  • Windows Service (T1543.003)
  • Netsh Helper DLL (T1546.007)

Defense Evasion (TA0005)

  • File and Directory Permissions Modification (T1222)
  • Disable or Modify System Firewall (T1562.004)

Discovery (TA0007)

  • Query Registry (T1012)
  • Internet Connection Discovery (T1016.001)
  • Remote System Discovery (T1018)
  • System Information Discovery (T1082)
  • Peripheral Device Discovery (T1120)
  • System Language Discovery (T1614.001)

Hostnames

1
  1. 1.szfwq888.com