Overview

overview

10

Static

static

1

next-steps.html

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    next-steps.html
  • Size 429KB
  • Sample260107-psjc8ses2a
  • SHA256 59ccc631e49239f4fb16eacfbdc3a5dafc5191af83eb57c870ad7408fc790d6f
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
888ratdiscoveryinfostealerphishingrattrojanupx

Malware Config

Targets

    • Target
      next-steps.html
    • Size 429KB
    • SHA256 59ccc631e49239f4fb16eacfbdc3a5dafc5191af83eb57c870ad7408fc790d6f
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    discovery888ratinfostealerphishingrattrojanupx

    • 888RAT

      888RAT is an Android remote administration tool.

      trojaninfostealerrat888rat

    • 888Rat family

      888rat

    • Android 888 RAT payload

    • A potential corporate email address has been identified in the URL: [email protected]

      phishing

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks