hxxp://confluence[.]wealt[.]ru | Triage™

Login
Reports

Overview

overview

6

Static

static

1

URLScan

urlscan

1

http://confluence.we...

ubuntu-18.04-amd64

6

http://confluence.we...

debian-9-armhf

http://confluence.we...

debian-9-mips

http://confluence.we...

debian-9-mipsel

Sharing

Copy URL Twitter E-mail

General

Target
http://confluence.wealt.ru
Sample240531-ry3eeabe8y

Score

6^/10

linux

Static task

static1

URLScan task

urlscan1

Behavioral task

behavioral1

Sample

http://confluence.wealt.ru

Resource

ubuntu1804-amd64-20240508-en

ubuntu-18.04-amd64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

http://confluence.wealt.ru

Resource

debian9-armhf-20240226-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

http://confluence.wealt.ru

Resource

debian9-mipsbe-20240226-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

http://confluence.wealt.ru

Resource

debian9-mipsel-20240418-en

debian-9-mipsel

0 signatures

150 seconds

Malware Config

Targets

- Target
  http://confluence.wealt.ru
Score

6^/10
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1 behavioral2 behavioral3 behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

urlscan1

behavioral1

behavioral2

behavioral3

behavioral4

© 2018-2026

Terms | Privacy