Overview

overview

5

Static

static

URLScan

urlscan

http:/afev...h.com)

windows10_x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    http:/afevolenthealth.com.elitemodel.ru.com/?tty=(rdirenzo@evolenthealth.com)

  • Sample

    210122-yj91kahwae

Score
5/10
ransomware

Malware Config

Targets

    • Target

      http:/afevolenthealth.com.elitemodel.ru.com/?tty=(rdirenzo@evolenthealth.com)

    Score
    5/10
    ransomware

    • Enumerates physical storage devices

      Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

      ransomware
    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks