Overview

overview

6

Static

static

1

slmit-ps-y...x.html

windows10-2004-x64

6

slmit-ps-y...x.html

windows11-21h2-x64

6

slmit-ps-y...x.html

windows10-2004-x64

6

slmit-ps-y...x.html

windows11-21h2-x64

6

slmit-ps-y...x.html

windows10-2004-x64

6

slmit-ps-y...x.html

windows11-21h2-x64

6

slmit-vsl-...x.html

windows10-2004-x64

6

slmit-vsl-...x.html

windows11-21h2-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target
    slm-it-yt.zip
  • Size 64KB
  • Sample260416-ppd94sft7n
  • SHA256 1104af2c4c44f7a5dfd71112b2f32b8db172a2bd1c90185261bf43fd46f104fa
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
discovery

Malware Config

Targets

    • Target
      slmit-ps-yt/index.html
    • Size 4KB
    • SHA256 4db801fcbb83e321342e6df540318e7beb7ca6780dc304a5395d9c98a16ed0cf
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discovery

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2
    • Target
      slmit-ps-yt/privacy/index.html
    • Size 6KB
    • SHA256 06ec31c6d59b5b17a67579ed4aaed8e121e6bc5bb6a215d05752d14f60aaa235
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discovery

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral3behavioral4
    • Target
      slmit-ps-yt/terms/index.html
    • Size 6KB
    • SHA256 b0d34d6129186d58ae22524f3600cebc78fa6149d472f9ff7f8b3cd4516a4090
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discovery

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral5behavioral6
    • Target
      slmit-vsl-yt/index.html
    • Size 4KB
    • SHA256 5b0c00c8e0023443e28941e150d4e715836f4f34cfdd54d0df11f2194d1bf9db
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discovery

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral7behavioral8

MITRE ATT&CK Enterprise v16

Tasks