General
- Target http://url6726.alfredpay.io/ls/click?upn=u001.YQzQqAna4wqSbz-2Fp8kblei0F-2BnvGVRaYx9AHqXupSTQ-3DAsWm_Rk2LDnblG5xWVF2dT3dh-2FdAeU4kZRcLQV1iaw-2F1e-2FvI0K3cUymUdeuVJfoqT022aKS7VpNM-2FVRy3xmNgrLNwd8POxAQwH0jwVbH90P7hzYp933lw-2B3Gx3i0jFKKfvWzaMaYkIq9xTA5ff0pVB04hSajE1FgqGK9B8CoRLf2HvphnEQslzqYlAwoWargQn8jGVh2mzs1QcBf98-2BnhuV-2Fic8YAz9ZpS8pkBCndVPEu-2BSPuTgx3k4ChPA0rRdzaaDo3uTyvz6gSxSzT6e7hReYnOlyETQSGS9X3blI5nIWVblQKI2kRXKXqwLduJBCHfAq03aOyFcAKtMgKX4wHt85K7Gbq1HZhPpvOecpPx1NZMDg-3D
- Sample260628-cry13sey7v
Score
8/10
Malware Config
Targets
-
- Target http://url6726.alfredpay.io/ls/click?upn=u001.YQzQqAna4wqSbz-2Fp8kblei0F-2BnvGVRaYx9AHqXupSTQ-3DAsWm_Rk2LDnblG5xWVF2dT3dh-2FdAeU4kZRcLQV1iaw-2F1e-2FvI0K3cUymUdeuVJfoqT022aKS7VpNM-2FVRy3xmNgrLNwd8POxAQwH0jwVbH90P7hzYp933lw-2B3Gx3i0jFKKfvWzaMaYkIq9xTA5ff0pVB04hSajE1FgqGK9B8CoRLf2HvphnEQslzqYlAwoWargQn8jGVh2mzs1QcBf98-2BnhuV-2Fic8YAz9ZpS8pkBCndVPEu-2BSPuTgx3k4ChPA0rRdzaaDo3uTyvz6gSxSzT6e7hReYnOlyETQSGS9X3blI5nIWVblQKI2kRXKXqwLduJBCHfAq03aOyFcAKtMgKX4wHt85K7Gbq1HZhPpvOecpPx1NZMDg-3D
Score8/10-
Downloads MZ/PE file
-
Loads dropped DLL
-
Suspicious clipboard content.
A suspicious script was copied to clipboard.
-
Power Settings
powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.