Overview

overview

8

Static

static

1

URLScan

urlscan

1

http://evon.cc

windows10-ltsc 2021-x64

8

Resubmissions

08-01-2025 22:22

250108-2anapawlft 7

08-01-2025 20:13

250108-yzvjhs1qcw 8

08-01-2025 20:00

250108-yrfema1mcs 10

08-01-2025 18:59

250108-xm664s1pfr 8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    http://evon.cc

  • Sample

    250108-yzvjhs1qcw

Score
8/10
discoverymotwphishing

Malware Config

Targets

    • Target

      http://evon.cc

    Score
    8/10
    discoverymotwphishing

    • Downloads MZ/PE file

    • A potential corporate email address has been identified in the URL: [email protected]

      phishing

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Mark of the Web detected: This indicates that the page was originally saved or cloned.

      phishingmotw
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks