Resubmissions
23/04/2024, 17:30
240423-v3jdwaac74823/04/2024, 06:17
240423-g11ngseb5v821/04/2024, 20:27
240421-y8nsbsbc9w821/04/2024, 20:20
240421-y4swgsba24808/04/2024, 20:45
240408-zj49fseg5y805/04/2024, 18:10
240405-wsd7vaaf8v805/04/2024, 18:10
240405-wr4fcabc25805/04/2024, 18:09
240405-wrkcgaaf6s805/04/2024, 18:08
240405-wrcydsbb88805/04/2024, 17:10
240405-vp2cjaab768General
- Target https://webshell.suite.office.com/iframe/TokenFactoryIframe?origin=https://outlook.office365.com&shsid=7720b54e-811e-4120-ae65-d26ac16ca6d5&apiver=oneshell&cshver=1.20240208.12.0&[email protected]
- Sample240405-vp2cjaab76
Score
8/10
Malware Config
Targets
-
- Target https://webshell.suite.office.com/iframe/TokenFactoryIframe?origin=https://outlook.office365.com&shsid=7720b54e-811e-4120-ae65-d26ac16ca6d5&apiver=oneshell&cshver=1.20240208.12.0&[email protected]
Score7/10-
Changes its process name
-
Reads user data of web browsers
Reads stored browser data which can include saved credentials.
-
Checks CPU configuration
Checks CPU information which indicate if the system is a virtual machine.
-
Reads CPU attributes