Overview

overview

8

Static

static

URLScan

urlscan

1

http://45.95.169.45:...

windows10-2004-x64

8

Resubmissions

22/11/2022, 00:51

221122-a7gqmagg5y8

21/11/2022, 23:09

221121-25dpqsed6v10

21/11/2022, 21:54

221121-1slddace2y10

21/11/2022, 21:30

221121-1crkfsge7910

21/11/2022, 20:42

221121-zg8h4afe2310

21/11/2022, 19:29

221121-x7e85ahb6w10

Sharing

Copy URL Twitter E-mail

General

  • Target
    http://45.95.169.45:23205/
  • Sample221122-a7gqmagg5y
Score
8/10
persistencepyinstaller

Malware Config

Targets

    • Target
      http://45.95.169.45:23205/
    Score
    8/10
    persistencepyinstaller

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks