Overview

overview

10

Static

static

1

URLScan

urlscan

1

http://bit.ly/triage...

windows10-2004-x64

10

Resubmissions

16-05-2024 18:43

240516-xcwydsaf2z 6

16-05-2024 18:06

240516-wpt4wsha2t 10

16-05-2024 17:08

240516-vnjfbsfa37 10

16-05-2024 15:39

240516-s3meesbd9s 6

14-05-2024 20:41

240514-zgd99aga49 6

14-05-2024 15:07

240514-shlx6aca2s 8

14-05-2024 14:22

240514-rplqasah63 6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    http://bit.ly/triageshare2024

  • Sample

    240516-vnjfbsfa37

Score
10/10
execution

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
exe.dropper

https://www.python.org/ftp/python/3.12.3/python-3.12.3-embed-amd64.zip

Targets

    • Target

      http://bit.ly/triageshare2024

    Score
    10/10
    execution

    • Blocklisted process makes network request

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks