hxxps://drive[.]google[.]com/drive/u/0/folders/1ypIR9V2IgH0E4bxaoJe2w7YX8nUS1deM | Triage

Submit
Reports

Overview

overview

9

Static

static

1

URLScan

urlscan

1

https://drive.google...

windows10-2004-x64

9

Sharing

General

Target

https://drive.google.com/drive/u/0/folders/1ypIR9V2IgH0E4bxaoJe2w7YX8nUS1deM
Sample

241129-szekeasrew

Score

9^/10

discovery evasion execution persistence ransomware

Static task

static1

URLScan task

urlscan1

Behavioral task

behavioral1

Sample

https://drive.google.com/drive/u/0/folders/1ypIR9V2IgH0E4bxaoJe2w7YX8nUS1deM

Resource

win10v2004-20241007-en

discovery evasion execution persistence ransomware

windows10-2004-x64

16 signatures

150 seconds

Malware Config

Targets

- Target
  
  https://drive.google.com/drive/u/0/folders/1ypIR9V2IgH0E4bxaoJe2w7YX8nUS1deM
Score

9^/10

discovery evasion execution persistence ransomware
- Modifies boot configuration data using bcdedit
  ransomware evasion
- Event Triggered Execution: Image File Execution Options Injection
  persistence
- Legitimate hosting services abused for malware hosting/C2
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Event Triggered Execution

Image File Execution Options Injection

Privilege Escalation

Event Triggered Execution

Image File Execution Options Injection

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Inhibit System Recovery

Tasks

static1

urlscan1

behavioral1

discoveryevasionexecutionpersistenceransomware

© 2018-2025

Terms | Privacy