General

  • Target

    https://speedjudgmentacceleration.com/index.php?key=total

  • Sample

    201201-m2hmz24gps

Score
10/10

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
ps1.dropper

http://rawcdn.githack.cyou/up.php?key=1

Extracted

Language
ps1
Source
URLs
exe.dropper

http://rawcdn.githack.cyou/up.php?key=2

Targets

    • Target

      https://speedjudgmentacceleration.com/index.php?key=total

    Score
    10/10
    • Blacklisted process makes network request

    • Loads dropped DLL

    • Modifies file permissions

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

File Permissions Modification

1
T1222

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Tasks