hxxp://www[.]emlaktelevizyonu[.]com

Resubmissions

21/06/2026, 00:57

260621-ba8zaaay6q8

20/06/2026, 23:40

260620-3n7f6abs8110

Sharing

Copy URL Twitter E-mail

General

Target
http://www.emlaktelevizyonu.com
Sample260620-3n7f6abs81

Score

10^/10

defense_evasion discovery

Malware Config

Extracted

Language

Source

URLs

exe.dropper
http://idverification-code.beer/7z
exe.dropper
http://idverification-code.beer/fe4a99039120031f6790262b8cc5673a090b16f3a2d915ad5da792db1f984023
exe.dropper
http://idverification-code.beer/bae22504abb59bb1?ack=1

Targets

- Target
  http://www.emlaktelevizyonu.com
Score

10^/10

defense_evasion discovery
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
- Downloads MZ/PE file
- Executes dropped EXE
- Obfuscated Files or Information: Command Obfuscation
  Adversaries may obfuscate content during command execution to impede detection.
  defense_evasion
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Obfuscated Files or Information

T1027

Command Obfuscation

T1027.010

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Extracted

Targets

Badlisted process makes network request

Downloads MZ/PE file

Executes dropped EXE

Obfuscated Files or Information: Command Obfuscation

Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks

static1

urlscan1

behavioral1