Overview

overview

8

Static

static

1

URLScan

urlscan

1

https://f77.megaup.n...

windows10-1703-x64

8

Resubmissions

15-06-2023 03:32

230615-d3t2yaee44 8

15-06-2023 02:42

230615-c7gfzaed88 1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    https://f77.megaup.net/2z6K1/Plasma.rar?download_token=300caf1562e46d480a7bee0e398e753d44960bd4347e5b01407e8b60ac0f1977

  • Sample

    230615-d3t2yaee44

Score
8/10
microsoftdiscoverypersistencephishing

Malware Config

Targets

    • Target

      https://f77.megaup.net/2z6K1/Plasma.rar?download_token=300caf1562e46d480a7bee0e398e753d44960bd4347e5b01407e8b60ac0f1977

    Score
    8/10
    microsoftdiscoverypersistencephishing

    • Downloads MZ/PE file

    • Drops file in Drivers directory

    • Sets service image path in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Registers COM server for autorun

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Detected potential entity reuse from brand microsoft.

      phishingmicrosoft
    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

2
T1060

Change Default File Association

1
T1042

Privilege Escalation

Defense Evasion

Modify Registry

4
T1112

Install Root Certificate

1
T1130

Credential Access

Discovery

Query Registry

4
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

3
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks