Overview

overview

10

Static

static

1

URLScan

urlscan

1

https://www.bing.com...

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    https://www.bing.com/ck/a?!&&p=2627c2e2704b62987146ed74582d902fcc8036c2ffb7eea095e5118d79a447faJmltdHM9MTczNjU1MzYwMA&ptn=3&ver=2&hsh=4&fclid=340493cd-36d8-6301-2ded-8689375c62ea&psq=best+free+da+hood+executor&u=a1aHR0cHM6Ly94ZW5vZXhlY3V0b3Iub3JnLw&ntb=1

  • Sample

    250112-ck88ga1mbz

Score
10/10
googlediscoverypersistencephishingprivilege_escalationpyinstaller

Malware Config

Targets

    • Target

      https://www.bing.com/ck/a?!&&p=2627c2e2704b62987146ed74582d902fcc8036c2ffb7eea095e5118d79a447faJmltdHM9MTczNjU1MzYwMA&ptn=3&ver=2&hsh=4&fclid=340493cd-36d8-6301-2ded-8689375c62ea&psq=best+free+da+hood+executor&u=a1aHR0cHM6Ly94ZW5vZXhlY3V0b3Iub3JnLw&ntb=1

    Score
    10/10
    googlediscoverypersistencephishingprivilege_escalationpyinstaller

    • Detected google phishing page

      phishinggoogle

    • Downloads MZ/PE file

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Drops file in System32 directory

    • Probable phishing domain

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks