hxxp://sanallink[.]rf[.]gd/

General

Target

http://sanallink.rf.gd/
Sample

240616-31ddvavbma

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  http://sanallink.rf.gd/
Score

7^/10

persistence
- Modifies system executable filetype association
  persistence
- Registers COM server for autorun
  persistence
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1

T1547

Registry Run Keys / Startup Folder

1

T1547.001

Event Triggered Execution

1

T1546

Change Default File Association

1

T1546.001

Privilege Escalation

Boot or Logon Autostart Execution

1

T1547

Registry Run Keys / Startup Folder

1

T1547.001

Event Triggered Execution

1

T1546

Change Default File Association

1

T1546.001

Defense Evasion

Modify Registry

2

T1112

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

3

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Modifies system executable filetype association

Registers COM server for autorun

MITRE ATT&CK Enterprise v15

Tasks

static1

urlscan1

behavioral1