Overview

overview

6

Static

static

1

URLScan

urlscan

https://github.com/y...

windows7-x64

6

Resubmissions

29/04/2024, 14:00

240429-ra95cacc68 7

29/04/2024, 13:58

240429-q92rkscc39 6

29/04/2024, 13:55

240429-q8dclacb73 6

Sharing

Copy URL Twitter E-mail

General

  • Target

    https://github.com/ytisf/theZoo

  • Sample

    240429-q92rkscc39

Score
6/10
persistence

Malware Config

Targets

    • Target

      https://github.com/ytisf/theZoo

    Score
    6/10
    persistence

    • Adds Run key to start application

      persistence

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks