hxxps://mobaxterm[.]mobatek[.]net/ | Triage

Submit
Reports

Overview

overview

8

Static

static

https://mobaxterm.mo...

windows10_x64

8

Sharing

General

Target

https://mobaxterm.mobatek.net/
Sample

200626-mhexs79smx

Score

8^/10

discovery evasion persistence spyware trojan

Static task

static1

Behavioral task

behavioral1

Sample

https://mobaxterm.mobatek.net/

Resource

win10

persistence discovery evasion spyware trojan

windows10_x64

0 signatures

0 seconds

Malware Config

Targets

- Target
  
  https://mobaxterm.mobatek.net/
Score

8^/10

persistence discovery evasion spyware trojan
- Blacklisted process makes network request
- Executes dropped EXE
- Loads dropped DLL
- Checks for installed software on the system
  discovery
- Enumerates connected drives
- Modifies system certificate store
  evasion spyware trojan
- Modifies service
  persistence
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencediscoveryevasionspywaretrojan

© 2018-2025

Terms | Privacy