General
-
Target
https://link.coboinc.com/ls/click?upn=fv6jI1K7SY9f4BfhpDrLedlQD5vRv5bp-2FYYFKBfpLvHTWlDPb3QBnB-2Fz-2F32ya1IQgryVbm54Re8vkTisx4i2PawH-2BM7KfgLZ6Z14ragNTS6fCoTjwGVnHrjeSzBDDFOFxWFDthGKqN-2FeH5sh7IFqS0QLrKM3O2yrilKF2-2F9b3KtuWePhKgGUTcB-2BDVoAuqT-2B-2B1Ys5kosCj2BNSAAAcSYP8IJ4Ansim1nlxqEvy-2Bi6xQ-3DWrJ3_lgwpNQji9ieIfmodYciNlUHfOVEqCtU9N7gh2XPE7BXrZwIMbpEPs3Gta9gLr2hrUrvltODLtI3-2Byt7BbuHIvu-2BVVM-2B-2BY-2BbC-2FspVozyvJcGKtk3BwR5Lti7faUG9O1wrHErU8TvOPzCL690uNyOB2MI2rQbKrSqGivPoTIWFf4IA26i6LXAqDJEKQ8mmxGlI8LZRNKGOgPHSQa4JIhhHlnOm35F4nMl6r-2BnOn7fR9QvwirxQ6L0GDFsBItKucAEh1pwYvEOBEMQbdkioRlx61HRdLV4UDEovwZ8-2FkoB-2BfXI-3D
-
Sample
210122-bkcewbwwvj
Static task
static1
URLScan task
urlscan1
Sample
https://link.coboinc.com/ls/click?upn=fv6jI1K7SY9f4BfhpDrLedlQD5vRv5bp-2FYYFKBfpLvHTWlDPb3QBnB-2Fz-2F32ya1IQgryVbm54Re8vkTisx4i2PawH-2BM7KfgLZ6Z14ragNTS6fCoTjwGVnHrjeSzBDDFOFxWFDthGKqN-2FeH5sh7IFqS0QLrKM3O2yrilKF2-2F9b3KtuWePhKgGUTcB-2BDVoAuqT-2B-2B1Ys5kosCj2BNSAAAcSYP8IJ4Ansim1nlxqEvy-2Bi6xQ-3DWrJ3_lgwpNQji9ieIfmodYciNlUHfOVEqCtU9N7gh2XPE7BXrZwIMbpEPs3Gta9gLr2hrUrvltODLtI3-2Byt7BbuHIvu-2BVVM-2B-2BY-2BbC-2FspVozyvJcGKtk3BwR5Lti7faUG9O1wrHErU8TvOPzCL690uNyOB2MI2rQbKrSqGivPoTIWFf4IA26i6LXAqDJEKQ8mmxGlI8LZRNKGOgPHSQa4JIhhHlnOm35F4nMl6r-2BnOn7fR9QvwirxQ6L0GDFsBItKucAEh1pwYvEOBEMQbdkioRlx61HRdLV4UDEovwZ8-2FkoB-2BfXI-3D
Behavioral task
behavioral1
Sample
https://link.coboinc.com/ls/click?upn=fv6jI1K7SY9f4BfhpDrLedlQD5vRv5bp-2FYYFKBfpLvHTWlDPb3QBnB-2Fz-2F32ya1IQgryVbm54Re8vkTisx4i2PawH-2BM7KfgLZ6Z14ragNTS6fCoTjwGVnHrjeSzBDDFOFxWFDthGKqN-2FeH5sh7IFqS0QLrKM3O2yrilKF2-2F9b3KtuWePhKgGUTcB-2BDVoAuqT-2B-2B1Ys5kosCj2BNSAAAcSYP8IJ4Ansim1nlxqEvy-2Bi6xQ-3DWrJ3_lgwpNQji9ieIfmodYciNlUHfOVEqCtU9N7gh2XPE7BXrZwIMbpEPs3Gta9gLr2hrUrvltODLtI3-2Byt7BbuHIvu-2BVVM-2B-2BY-2BbC-2FspVozyvJcGKtk3BwR5Lti7faUG9O1wrHErU8TvOPzCL690uNyOB2MI2rQbKrSqGivPoTIWFf4IA26i6LXAqDJEKQ8mmxGlI8LZRNKGOgPHSQa4JIhhHlnOm35F4nMl6r-2BnOn7fR9QvwirxQ6L0GDFsBItKucAEh1pwYvEOBEMQbdkioRlx61HRdLV4UDEovwZ8-2FkoB-2BfXI-3D
Resource
win10v20201028
Malware Config
Targets
-
-
Target
https://link.coboinc.com/ls/click?upn=fv6jI1K7SY9f4BfhpDrLedlQD5vRv5bp-2FYYFKBfpLvHTWlDPb3QBnB-2Fz-2F32ya1IQgryVbm54Re8vkTisx4i2PawH-2BM7KfgLZ6Z14ragNTS6fCoTjwGVnHrjeSzBDDFOFxWFDthGKqN-2FeH5sh7IFqS0QLrKM3O2yrilKF2-2F9b3KtuWePhKgGUTcB-2BDVoAuqT-2B-2B1Ys5kosCj2BNSAAAcSYP8IJ4Ansim1nlxqEvy-2Bi6xQ-3DWrJ3_lgwpNQji9ieIfmodYciNlUHfOVEqCtU9N7gh2XPE7BXrZwIMbpEPs3Gta9gLr2hrUrvltODLtI3-2Byt7BbuHIvu-2BVVM-2B-2BY-2BbC-2FspVozyvJcGKtk3BwR5Lti7faUG9O1wrHErU8TvOPzCL690uNyOB2MI2rQbKrSqGivPoTIWFf4IA26i6LXAqDJEKQ8mmxGlI8LZRNKGOgPHSQa4JIhhHlnOm35F4nMl6r-2BnOn7fR9QvwirxQ6L0GDFsBItKucAEh1pwYvEOBEMQbdkioRlx61HRdLV4UDEovwZ8-2FkoB-2BfXI-3D
Score6/10-
Program crash
-
Enumerates physical storage devices
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-