Overview
overview
10Static
static
1Spotify/Bl...ot.bat
windows7-x64
1Spotify/Bl...ot.bat
windows10-2004-x64
8Spotify/Bl...ME.ps1
windows7-x64
1Spotify/Bl...ME.ps1
windows10-2004-x64
1Spotify/Bl...ll.ps1
windows7-x64
8Spotify/Bl...ll.ps1
windows10-2004-x64
10Spotify/Bl...ll.bat
windows7-x64
1Spotify/Bl...ll.bat
windows10-2004-x64
1Spotify/Bl...x.html
windows7-x64
1Spotify/Bl...x.html
windows10-2004-x64
1Spotify/Bl...dle.js
windows7-x64
1Spotify/Bl...dle.js
windows10-2004-x64
1Spotify/Se...up.exe
windows7-x64
8Spotify/Se...up.exe
windows10-2004-x64
10Analysis
-
max time kernel
31s -
max time network
34s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
26-03-2023 13:21
Static task
static1
Behavioral task
behavioral1
Sample
Spotify/Block/BlockTheSpot.bat
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Spotify/Block/BlockTheSpot.bat
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
Spotify/Block/README.ps1
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
Spotify/Block/README.ps1
Resource
win10v2004-20230221-en
Behavioral task
behavioral5
Sample
Spotify/Block/install.ps1
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
Spotify/Block/install.ps1
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
Spotify/Block/uninstall.bat
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
Spotify/Block/uninstall.bat
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
Spotify/Block/zlink/index.html
Resource
win7-20230220-en
Behavioral task
behavioral10
Sample
Spotify/Block/zlink/index.html
Resource
win10v2004-20230220-en
Behavioral task
behavioral11
Sample
Spotify/Block/zlink/zlink.bundle.js
Resource
win7-20230220-en
Behavioral task
behavioral12
Sample
Spotify/Block/zlink/zlink.bundle.js
Resource
win10v2004-20230220-en
Behavioral task
behavioral13
Sample
Spotify/Setup/SpotifySetup.exe
Resource
win7-20230220-en
Behavioral task
behavioral14
Sample
Spotify/Setup/SpotifySetup.exe
Resource
win10v2004-20230220-en
General
-
Target
Spotify/Block/README.ps1
-
Size
3KB
-
MD5
baab820fefe5b5082749472b2c26346e
-
SHA1
5bb717d1856e4a04fbd352c42921d8776451cc6e
-
SHA256
fbd3ba7a76d383371e640778818f956d7e8e5632589e293f402d8111d40173a3
-
SHA512
5a9600901c7bc413343227de6df34fb09f47f9beb890cd5c9fd7372697fb31edd8ffa34a5b585b876faa547f6e648dc2ff565be921975edf2a759308af24db14
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes:
powershell.exepid process 1704 powershell.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
powershell.exedescription pid process Token: SeDebugPrivilege 1704 powershell.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1704-58-0x000000001B290000-0x000000001B572000-memory.dmpFilesize
2.9MB
-
memory/1704-59-0x0000000002700000-0x0000000002780000-memory.dmpFilesize
512KB
-
memory/1704-61-0x0000000002310000-0x0000000002318000-memory.dmpFilesize
32KB
-
memory/1704-62-0x0000000002700000-0x0000000002780000-memory.dmpFilesize
512KB
-
memory/1704-60-0x0000000002700000-0x0000000002780000-memory.dmpFilesize
512KB
-
memory/1704-63-0x000000000270B000-0x0000000002742000-memory.dmpFilesize
220KB