Overview

overview

8

Static

static

8

URLScan

urlscan

1

http://secure-web.ci...

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    http://secure-web.cisco.com/1qThsMPBOZ61yAm5BQWzwK-5CA0xBWLJnMn126ed7hO5-gYnrsIoaIsYi27BVmCbpxPf5VC3E4Y26oEb8lRAcARxra4Lnvo2vf9zni6Y2jaDU5dJ7n7PAxgUhciQc9Ry2gxh-30O49u8e_OC_ZFz-rPGdT6YWmgZ9h6HSMnhPYZyNPRcG2yrerKhUzvFnln8sIIcEgeJjiqo-p8fW0OC5A_QF6FJ2niRaYSFNfPP_4SO44eYwnB5LObELszbEmOuXIBNxYUMCm2ENbmPMFUfp6LAwPdi61KimkEVvktJBfqa6UwfkVpOkL1XrhAb2Fak_fJ5xaSZYLxZI8HZ6NDB4mSeWylx-Wb2ANs61fTjXqpRAT72BGWeZt6kNfWgQkH72GTy3MJgTdXN2XYS8N40h8nFhsobIh68M-xKobwGx12M/http%3A%2F%2Fzara.datesite.quest%2F%3Fa%3Dnoriecel.lopez%40allscripts.com

  • Sample

    221202-yaqt2aga43

Score
8/10
phishing

Malware Config

Targets

    • Target

      http://secure-web.cisco.com/1qThsMPBOZ61yAm5BQWzwK-5CA0xBWLJnMn126ed7hO5-gYnrsIoaIsYi27BVmCbpxPf5VC3E4Y26oEb8lRAcARxra4Lnvo2vf9zni6Y2jaDU5dJ7n7PAxgUhciQc9Ry2gxh-30O49u8e_OC_ZFz-rPGdT6YWmgZ9h6HSMnhPYZyNPRcG2yrerKhUzvFnln8sIIcEgeJjiqo-p8fW0OC5A_QF6FJ2niRaYSFNfPP_4SO44eYwnB5LObELszbEmOuXIBNxYUMCm2ENbmPMFUfp6LAwPdi61KimkEVvktJBfqa6UwfkVpOkL1XrhAb2Fak_fJ5xaSZYLxZI8HZ6NDB4mSeWylx-Wb2ANs61fTjXqpRAT72BGWeZt6kNfWgQkH72GTy3MJgTdXN2XYS8N40h8nFhsobIh68M-xKobwGx12M/http%3A%2F%2Fzara.datesite.quest%2F%3Fa%3Dnoriecel.lopez%40allscripts.com

    Score
    8/10

    • Executes dropped EXE

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks