Overview

overview

10

Static

static

1

URLScan

urlscan

http://github.com/Sl...

windows10-2004-x64

10

Resubmissions

04-09-2024 02:38

240904-c43vssvfpb 10

04-09-2024 02:30

240904-czleystdmk 7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    http://github.com/SlejmUr/Manifest_Tool_TB/raw/main/Plazas.zip

  • Sample

    240904-c43vssvfpb

Score
10/10
r77discoveryrootkit

Malware Config

Targets

    • Target

      http://github.com/SlejmUr/Manifest_Tool_TB/raw/main/Plazas.zip

    Score
    10/10
    r77discoveryrootkit

    • r77

      r77 is an open-source, userland rootkit.

      rootkitr77

    • r77 rootkit payload

      Detects the payload of the r77 rootkit.

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks