hxxps://xachina[.]drist[.]lol/swino_swino_xryak | Triage

Submit
Reports

Overview

overview

8

Static

static

1

URLScan

urlscan

1

https://xachina.dris...

windows10-1703-x64

8

Sharing

General

Target

https://xachina.drist.lol/swino_swino_xryak
Sample

240809-lh26tashjb

Score

8^/10

defense_evasion evasion execution persistence

Static task

static1

URLScan task

urlscan1

Behavioral task

behavioral1

Sample

https://xachina.drist.lol/swino_swino_xryak

Resource

win10-20240404-en

defense_evasion evasion execution persistence

windows10-1703-x64

24 signatures

600 seconds

Malware Config

Targets

- Target
  
  https://xachina.drist.lol/swino_swino_xryak
Score

8^/10

defense_evasion evasion execution persistence
- Command and Scripting Interpreter: PowerShell
  Using powershell.exe command.
  execution
- Creates new service(s)
  persistence execution
- Downloads MZ/PE file
- Stops running service(s)
  evasion execution
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Drops file in System32 directory
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Subvert Trust Controls

SIP and Trust Provider Hijacking

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Service Stop

Tasks

static1

urlscan1

behavioral1

defense_evasionevasionexecutionpersistence

© 2018-2025

Terms | Privacy