General
-
Target
http://google.com
-
Sample
240622-nf7pmazdlr
Score
9/10
Malware Config
Targets
-
-
Target
http://google.com
Score9/10-
Renames multiple (7781) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Executes dropped EXE
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops desktop.ini file(s)
-
Legitimate hosting services abused for malware hosting/C2
-