Overview

overview

7

Static

static

1

URLScan

urlscan

https://www.mediafir...

windows10-2004-x64

Resubmissions

05-12-2023 11:48

231205-nyerkabb78 1

05-12-2023 11:37

231205-nrgmksbb52 1

05-12-2023 11:30

231205-nmktfaag4t 1

01-12-2023 08:49

231201-kreansgc79 10

01-12-2023 07:29

231201-ja8brafh46 10

01-12-2023 07:25

231201-h9ggmsfh38 7

30-11-2023 13:08

231130-qc7xbscd2x 7

30-11-2023 08:58

231130-kw7g1saa3s 1

27-11-2023 07:20

231127-h6jslafb53 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    https://www.mediafire.com/file/t9usn5skz63s9p9/Sipari%C5%9F+%C3%96zellikleri+pdf.tgz/file

  • Sample

    231130-qc7xbscd2x

Score
7/10
adwarepersistencestealer

Malware Config

Targets

    • Target

      https://www.mediafire.com/file/t9usn5skz63s9p9/Sipari%C5%9F+%C3%96zellikleri+pdf.tgz/file

    Score
    7/10
    adwarepersistencestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Registers COM server for autorun

      persistence

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks