Overview

overview

10

Static

static

1

URLScan

urlscan

1

https://ap-176382878...

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    https://ap-1763828788-ysy1yi-8poju3qoo74r4f5owx33aa7q51cx6aps3b-s3alias.s3.ap-south-1.amazonaws.com/2f57c4da2de768e61147fdc357855a21___bffc78bb-4ee6-4861-bd91-ef5b75fa4f04.exe?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Checksum-Mode=ENABLED&X-Amz-Credential=ASIAZQNPQR3YKL73QHPX%2F20251122%2Fap-south-1%2Fs3%2Faws4_request&X-Amz-Date=20251122T162628Z&X-Amz-Expires=3600&X-Amz-Security-Token=IQoJb3JpZ2luX2VjEGAaCmFwLXNvdXRoLTEiRjBEAiAuGHiZdokLOhPMDf17XwnioFpMm1%2FTi0JRqLjcvXwi4AIgVKZW8zQ3fEq0yhmMU6r%2B7kB58yBQ5P7fvUwyVJXoshcq6AMIKhACGgw2NTM3Mzk5ODY2NzIiDP4qNQa2YkRwMvOygSrFAxHN7d%2BG88A1pWykg3TvSLhuHuOphzKOrPZItTp3EyNyJCArvB9KX2ZsEN0%2FalRpIcEbewCvT2%2F8Dg5X5bnparQTb1DMDMuG1jppKdE1ckOIRkQM8uzDGbM6lHCECdj8X2Ud1Emp6Gw3yFUs5%2FUDRhZ9u1SMk75HQmJvk500LJ879IkDpGDO8RJPBFZ1EupmkjuYhyU9bjb%2BxgnAK51sz3Xe7ysldf4rryR4ZpVEicTY%2B7f4qalPgqC331w%2FneDCdDALrABFawPEqjSH2l0b9DVYMckZI8Sf0vddRgmMKLKUlMQy2CeF7gIasNSx7H4GRRJR%2BbiS4RpN45s4I9GohfS4zfF7td8zlULdWevhC34C1K%2BbDqN9JTPtAoz1A6mdMOPvhH%2BQwepQVGetdA9R83D6G2zb6RJU20lkjdxYTJuvWVMqDE44EMkdHW2%2BqGueE9B9TUMr0M2lcOmHkkZzRsidfxtuBQyZ%2FnmFXnlTX7ZgW%2BGn2pZhx9KulZSjTBg4z1pN3a0IkvZ%2FPsxshqnWFY5BnG%2FEnrrCZJbPNN8psA3XNlAUMPmAJjapOROsPvas5Fmix4grNYLrhttj4Htuab%2BtpJ5%2FYjDhx4fJBjqmAZsQcG5Z7%2BSl4vKt9Pi9zsB8Z%2F%2BQ88KCvGeMJnOYWVokRqXXeYPjkAdewVTwB%2FxgLtNeoC7Ob3lbuV6DGg76bakEKGITtZQZHfR5hQIulC4w7zS6gGMbaoYrnfugJEnnJujXr9Cvrxii%2BF0H1pdlf4pa2D9ix7cJzK72YYTqHapORkqM0UUu1XJrQU2cSjCT8ypz3wYwIt74mTdUlewQ3ISRLRJFeqE%3D&X-Amz-SignedHeaders=host&x-id=GetObject&X-Amz-Signature=f5cb5139db4aaa0793f3eb3e988062936288b7f626292a5c5d200eb68bdf47c8
  • Sample251122-t7relsbj9z
Score
10/10
chaosbotdiscoverystealer

Malware Config

Targets

    • Target
      https://ap-1763828788-ysy1yi-8poju3qoo74r4f5owx33aa7q51cx6aps3b-s3alias.s3.ap-south-1.amazonaws.com/2f57c4da2de768e61147fdc357855a21___bffc78bb-4ee6-4861-bd91-ef5b75fa4f04.exe?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Checksum-Mode=ENABLED&X-Amz-Credential=ASIAZQNPQR3YKL73QHPX%2F20251122%2Fap-south-1%2Fs3%2Faws4_request&X-Amz-Date=20251122T162628Z&X-Amz-Expires=3600&X-Amz-Security-Token=IQoJb3JpZ2luX2VjEGAaCmFwLXNvdXRoLTEiRjBEAiAuGHiZdokLOhPMDf17XwnioFpMm1%2FTi0JRqLjcvXwi4AIgVKZW8zQ3fEq0yhmMU6r%2B7kB58yBQ5P7fvUwyVJXoshcq6AMIKhACGgw2NTM3Mzk5ODY2NzIiDP4qNQa2YkRwMvOygSrFAxHN7d%2BG88A1pWykg3TvSLhuHuOphzKOrPZItTp3EyNyJCArvB9KX2ZsEN0%2FalRpIcEbewCvT2%2F8Dg5X5bnparQTb1DMDMuG1jppKdE1ckOIRkQM8uzDGbM6lHCECdj8X2Ud1Emp6Gw3yFUs5%2FUDRhZ9u1SMk75HQmJvk500LJ879IkDpGDO8RJPBFZ1EupmkjuYhyU9bjb%2BxgnAK51sz3Xe7ysldf4rryR4ZpVEicTY%2B7f4qalPgqC331w%2FneDCdDALrABFawPEqjSH2l0b9DVYMckZI8Sf0vddRgmMKLKUlMQy2CeF7gIasNSx7H4GRRJR%2BbiS4RpN45s4I9GohfS4zfF7td8zlULdWevhC34C1K%2BbDqN9JTPtAoz1A6mdMOPvhH%2BQwepQVGetdA9R83D6G2zb6RJU20lkjdxYTJuvWVMqDE44EMkdHW2%2BqGueE9B9TUMr0M2lcOmHkkZzRsidfxtuBQyZ%2FnmFXnlTX7ZgW%2BGn2pZhx9KulZSjTBg4z1pN3a0IkvZ%2FPsxshqnWFY5BnG%2FEnrrCZJbPNN8psA3XNlAUMPmAJjapOROsPvas5Fmix4grNYLrhttj4Htuab%2BtpJ5%2FYjDhx4fJBjqmAZsQcG5Z7%2BSl4vKt9Pi9zsB8Z%2F%2BQ88KCvGeMJnOYWVokRqXXeYPjkAdewVTwB%2FxgLtNeoC7Ob3lbuV6DGg76bakEKGITtZQZHfR5hQIulC4w7zS6gGMbaoYrnfugJEnnJujXr9Cvrxii%2BF0H1pdlf4pa2D9ix7cJzK72YYTqHapORkqM0UUu1XJrQU2cSjCT8ypz3wYwIt74mTdUlewQ3ISRLRJFeqE%3D&X-Amz-SignedHeaders=host&x-id=GetObject&X-Amz-Signature=f5cb5139db4aaa0793f3eb3e988062936288b7f626292a5c5d200eb68bdf47c8
    Score
    10/10
    discoverychaosbotstealer

    • ChaosBot

      ChaosBot is an infostealer written in Rust.

      stealerchaosbot

    • Chaosbot family

      chaosbot

    • Detects ChaosBot payload.

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks