hxxp://cuties[.]vps[.]boxtoplay[.]com[:]1570/downloadBaiBaii

Resubmissions

11/06/2024, 21:45

240611-1l547sshjp8

11/06/2024, 21:42

240611-1kgp8asgqb8

Sharing

Copy URL Twitter E-mail

General

Target
http://cuties.vps.boxtoplay.com:1570/downloadBaiBaii
Sample240611-1l547sshjp

Score

8^/10

Malware Config

Targets

- Target
  http://cuties.vps.boxtoplay.com:1570/downloadBaiBaii
Score

8^/10

discovery execution ransomware
- Blocklisted process makes network request
- Command and Scripting Interpreter: PowerShell
  Powershell Invoke Web Request.
  execution
- Drops startup file
- Modifies file permissions
  discovery
- Sets desktop wallpaper using registry
  ransomware
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

T1222

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Defacement

T1491

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Blocklisted process makes network request

Command and Scripting Interpreter: PowerShell

Drops startup file

Modifies file permissions

Sets desktop wallpaper using registry

MITRE ATT&CK Enterprise v15

Tasks

static1

urlscan1

behavioral1