Overview

overview

8

Static

static

1

URLScan

urlscan

https://www.google.c...

windows10-ltsc_2021-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    https://www.google.com/search?sca_esv=8d22432dd1613600&rlz=1C1VDKB_enUS1052US1052&sxsrf=APpeQntoq4m5xvvnVCtlPp7HknJ7AzoY3w:1782672753646&q=SchnurriTV%27s+Sexmod&source=lnms&fbs=ABfTbFXmzBGw9LECshVETHbdczUekrr4P3jxmDQ00QvQP6rDCfvRDF3m1JTFCpkx8Z4iq9z8xhLykLDzaSPR_WnkEfAz5qWAw3_zN4rAlwnP-QazUthoFCucB6bU9u7nCaOj5t9ew6IhW5Pyd7lNPuE2IX-sxVovkZFpQXKsBdGRRjqkW-RB-WGT7hic1sNP6Ypq3QNATz9HEaRgG7XIxwUOP204Oj0e-VUqMwni6MilFWEo7Y4lF9w&sa=X&ved=2ahUKEwiviu3BzaqVAxUtNYYAHY7RLSwQ0pQJegQIDxAB&biw=1745&bih=828&dpr=1.1
  • Sample260628-x65sdsds6m
Score
8/10
discoverymotwpersistencephishingransomware

Malware Config

Targets

    • Target
      https://www.google.com/search?sca_esv=8d22432dd1613600&rlz=1C1VDKB_enUS1052US1052&sxsrf=APpeQntoq4m5xvvnVCtlPp7HknJ7AzoY3w:1782672753646&q=SchnurriTV%27s+Sexmod&source=lnms&fbs=ABfTbFXmzBGw9LECshVETHbdczUekrr4P3jxmDQ00QvQP6rDCfvRDF3m1JTFCpkx8Z4iq9z8xhLykLDzaSPR_WnkEfAz5qWAw3_zN4rAlwnP-QazUthoFCucB6bU9u7nCaOj5t9ew6IhW5Pyd7lNPuE2IX-sxVovkZFpQXKsBdGRRjqkW-RB-WGT7hic1sNP6Ypq3QNATz9HEaRgG7XIxwUOP204Oj0e-VUqMwni6MilFWEo7Y4lF9w&sa=X&ved=2ahUKEwiviu3BzaqVAxUtNYYAHY7RLSwQ0pQJegQIDxAB&biw=1745&bih=828&dpr=1.1
    Score
    8/10
    discoverymotwpersistencephishingransomware

    • Downloads MZ/PE file

    • Mark of the Web detected: This indicates that the page was originally saved or cloned.

      phishingmotw

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks