TGViewer
CTT Report Hub CTT Report Hub @aptreports · 3.52K subscribers
Post #32009 40
#ParsedReport #CompletenessHigh
28-08-2026

The Video That Plays You: Fake MP4 File Carries Malicious Payload

https://censys.com/blog/fake-mp4-file-carries-malicious-payload/

Report completeness: High

Threats:
Netsupportmanager_rat
Clickfix_technique

Industry:
Telco

Geo:
Russian, Los angeles, Switzerland

TTPs:
Tactics: 3
Technics: 0

ChatGPT TTPs:
do not use without manual check
T1027, T1027.002, T1027.004, T1027.009, T1027.013, T1036, T1036.005, T1059.001, T1070, T1071.001, have more...

IOCs:
Domain: 30
Hash: 40
Url: 14
IP: 13
File: 19

Soft:
Chrome, Windows Defender

Algorithms:
sha256, xor, base64

Win API:
ARC, decompress, BIn

Languages:
powershell
Censys The Video That Plays You: Fake MP4 File Carries Malicious Payload - Censys Censys ARC examines the kit that hides malicious payloads within a fake MP4 file that can pass file-type checks. Here's how it works.
More from @aptreports
  1. Oct 14, 2026#ParsedReport #ChatGPT #Translated Autotext: (TI Report Analyser + ChatGPT + Auto Translat…
  2. Oct 14, 2026#ParsedReport #GeneratedSchema Generated with GPT-4
  3. Oct 14, 2026#ParsedReport #CompletenessHigh 13-10-2026 MALFEX Moves Its npm Loader into a Native Windo…
  4. Oct 14, 2026#ParsedReport #ChatGPT #Translated Autotext: (TI Report Analyser + ChatGPT + Auto Translat…
  5. Oct 14, 2026#ParsedReport #GeneratedSchema Generated with GPT-4
  6. Oct 14, 2026#ParsedReport #CompletenessLow 13-10-2026 RSVP to Disaster: How One Click Installs a RAT h…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →