Overview

overview

10

Static

static

URLScan

urlscan

10

http://email.consume...

windows10_x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    http://email.consumeraffairs.com/ls/click?upn=UXxTCTDYMJYDXg8haPUKnG3uy7tGDjyKP1Q5Kdmx-2B14cvCxIPhmxm5x9Cbqmz7HFUTYZXmHECTrtLCwvgirS2Y-2BrqZCIHwAeTLUZ7bwQJAxvp1en85YehOQmdQTf8GesEPZSvV9yeSybxUlUKcC5Tw-3D-3D6TbE_SSXOCZp8ASSy98un1HJ3BTUSDBjyiFx6Ud8ElFDlX-2FB4rIkt3Fq2WKTs1tbKpARVPCPFmiZPz213uCJKdlad0YY6RbLmHTVFkzcy-2FxGv0wjWq1B6XZbMQi3ysxMmkXEum1ofdPn0Gtd8ih4WuqDAlbblUVVZhX77AOiX-2BOmDdwYypMtGjizEX8xOHTy9D-2FjUyPwDG9yj7CRNtft5jnvbIjQ-2BS-2BkviPwGxfUHDfDcxrQ-3D

  • Sample

    210122-caz9za9rwe

Score
10/10
microsoftphishingransomware

Malware Config

Targets

    • Target

      http://email.consumeraffairs.com/ls/click?upn=UXxTCTDYMJYDXg8haPUKnG3uy7tGDjyKP1Q5Kdmx-2B14cvCxIPhmxm5x9Cbqmz7HFUTYZXmHECTrtLCwvgirS2Y-2BrqZCIHwAeTLUZ7bwQJAxvp1en85YehOQmdQTf8GesEPZSvV9yeSybxUlUKcC5Tw-3D-3D6TbE_SSXOCZp8ASSy98un1HJ3BTUSDBjyiFx6Ud8ElFDlX-2FB4rIkt3Fq2WKTs1tbKpARVPCPFmiZPz213uCJKdlad0YY6RbLmHTVFkzcy-2FxGv0wjWq1B6XZbMQi3ysxMmkXEum1ofdPn0Gtd8ih4WuqDAlbblUVVZhX77AOiX-2BOmDdwYypMtGjizEX8xOHTy9D-2FjUyPwDG9yj7CRNtft5jnvbIjQ-2BS-2BkviPwGxfUHDfDcxrQ-3D

    Score
    5/10
    ransomware

    • Enumerates physical storage devices

      Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

      ransomware
    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks