General
-
Target
https://vewrgvbe43r50t9jgh-0hewr-gfhjw-9fhrj-wjeff.obs.ap-southeast-3.myhuaweicloud.com/ve9trf0ge905rt-0gbnf-v0rewbndfv-0wnbe-r0fnb9wefe.html?AWSAccessKeyId=BIYYVE07OMDKEILTTF0R&Expires=1663784591&Signature=x3g9OUfurCa2nDfAe7DPmkdZRqM%3D#chris.abramson@walgreens.com
-
Sample
220823-sl1wgsghd4
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://vewrgvbe43r50t9jgh-0hewr-gfhjw-9fhrj-wjeff.obs.ap-southeast-3.myhuaweicloud.com/ve9trf0ge905rt-0gbnf-v0rewbndfv-0wnbe-r0fnb9wefe.html?AWSAccessKeyId=BIYYVE07OMDKEILTTF0R&Expires=1663784591&Signature=x3g9OUfurCa2nDfAe7DPmkdZRqM%3D#chris.abramson@walgreens.com
Resource
win10-20220812-en
Behavioral task
behavioral2
Sample
https://vewrgvbe43r50t9jgh-0hewr-gfhjw-9fhrj-wjeff.obs.ap-southeast-3.myhuaweicloud.com/ve9trf0ge905rt-0gbnf-v0rewbndfv-0wnbe-r0fnb9wefe.html?AWSAccessKeyId=BIYYVE07OMDKEILTTF0R&Expires=1663784591&Signature=x3g9OUfurCa2nDfAe7DPmkdZRqM%3D#chris.abramson@walgreens.com
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
https://vewrgvbe43r50t9jgh-0hewr-gfhjw-9fhrj-wjeff.obs.ap-southeast-3.myhuaweicloud.com/ve9trf0ge905rt-0gbnf-v0rewbndfv-0wnbe-r0fnb9wefe.html?AWSAccessKeyId=BIYYVE07OMDKEILTTF0R&Expires=1663784591&Signature=x3g9OUfurCa2nDfAe7DPmkdZRqM%3D#chris.abramson@walgreens.com
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
-