Overview

overview

9

Static

static

1

URLScan

urlscan

https://mega.nz/fold...

windows11-21h2-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    https://mega.nz/folder/HZ43QRzK#TtqMnisZc9e9CG7Xc65qYA

  • Sample

    240928-tq712axejf

Score
9/10
defense_evasiondiscoverypyinstaller

Malware Config

Targets

    • Target

      https://mega.nz/folder/HZ43QRzK#TtqMnisZc9e9CG7Xc65qYA

    Score
    9/10
    defense_evasiondiscoverypyinstaller

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks