Overview

overview

10

Static

static

URLScan

urlscan

http://Cisco.com/vla...

windows7_x64

1

http://Cisco.com/vla...

windows10-2004_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    http://Cisco.com/vlanswitch2018/inevidence2021/unit12/unit9unuversalswitch/2roots/2beacons/1emfpositive/photons
  • Sample220114-sgxy2ahbdm
Score
10/10
persistence

Malware Config

Targets

    • Target
      http://Cisco.com/vlanswitch2018/inevidence2021/unit12/unit9unuversalswitch/2roots/2beacons/1emfpositive/photons
    Score
    10/10
    persistence

    • Modifies system executable filetype association

      persistence

    • Registers COM server for autorun

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks