rbks31.second_layer.bin

Classification: Malicious

rbks31.second_layer.bin is a malicious file sample (Windows executable). Linked to Mispadu malware. Reported by 4 threat sources, last seen 2026-10-09.

Detection summary

  • 0 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: MISPADU (S1122)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Mispadu ThreatFox Abuse.ch 2026-10-09 15:45:55 2026-10-09 16:25:06
Generic Malware Hybrid-Analysis 2026-10-08 15:45:04 2026-10-08 15:45:04 malicious-activity
Mispadu Triage 2026-10-08 14:49:15 2026-10-08 14:49:15 malicious-activity S1122 Mispadu
Mispadu MalwareBazaar Abuse.ch 2026-10-08 14:48:25 2026-10-08 14:48:25 malicious-activity

Tags

mispadu discovery stealer evasive win.mispadu ursa

Sample information

Filenames
rbks31.second_layer.bin, rbks31.second_layer.bin.exe
File type
PE32 executable for MS Windows 5.00 (GUI), Intel i ...
MD5
97e42e50ecb6690f179b58c20f9de633
SHA-1
933d61b725414ff1ca8776ee4193aa0c1a77b107
SHA-256
4f4129e8f79bde102875417f64a3258226ae93658776a416aaf4383698a6ea7d
First indexed
2026-10-08 14:48:25
Last updated
2026-10-09 16:51:40