Overview

overview

9

Static

static

1

URLScan

urlscan

https://www.youtube....

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqbVdQQmZjV3g2c19zcU5JVHlaVkx4X3JxeTM0QXxBQ3Jtc0ttMXAxaFFIUm9mQ2hQX2tXeEJRR2RrY2VacnE1RFgyRU5XcTl4T2FwazFVd0tsbTB2bkxTbjR3aEJGNThhSlhkTlhGS2dpM0g5MFBHa1NubkExUG5udkdOLUg2TGVyWWVsOHpaeG1xQlVqdEl5VEVXTQ&q=https%3A%2F%2Fgodsexploits.com%2F&v=LdeGkLhBnxI

  • Sample

    240225-p8w92acb45

Score
9/10
cryptonepacker

Malware Config

Targets

    • Target

      https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqbVdQQmZjV3g2c19zcU5JVHlaVkx4X3JxeTM0QXxBQ3Jtc0ttMXAxaFFIUm9mQ2hQX2tXeEJRR2RrY2VacnE1RFgyRU5XcTl4T2FwazFVd0tsbTB2bkxTbjR3aEJGNThhSlhkTlhGS2dpM0g5MFBHa1NubkExUG5udkdOLUg2TGVyWWVsOHpaeG1xQlVqdEl5VEVXTQ&q=https%3A%2F%2Fgodsexploits.com%2F&v=LdeGkLhBnxI

    Score
    9/10
    cryptonepacker

    • CryptOne packer

      Detects CryptOne packer defined in NCC blogpost.

      cryptonepacker

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

3
T1012

System Information Discovery

4
T1082

Peripheral Device Discovery

1
T1120

Process Discovery

1
T1057

Remote System Discovery

1
T1018

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks