Resubmissions

20-06-2023 17:45

230620-wbqvbadd25 8

20-06-2023 17:42

230620-v94cmadc96 8

15-06-2023 00:35

230615-axnfeseb59 8

15-06-2023 00:32

230615-av2v2aeb58 8

15-06-2023 00:19

230615-amg6naeb9x 10

14-06-2023 23:59

230614-3154vseb36 8

14-06-2023 23:56

230614-3zekhseb6w 8

14-06-2023 23:53

230614-3xh5xseb51 8

14-06-2023 23:52

230614-3wq45seb5z 8

General

  • Target

    https://github.com/disepi/ambrosial/releases/download/1.5/Ambrosial.exe

  • Sample

    230614-3xh5xseb51

Score
8/10

Malware Config

Targets

    • Target

      https://github.com/disepi/ambrosial/releases/download/1.5/Ambrosial.exe

    Score
    8/10
    • Downloads MZ/PE file

    • Obfuscated with Agile.Net obfuscator

      Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v6

Tasks