General
- Target https://drive.google.com:download_GpGjLXQsvgRC8sTt_file_Txc6ZDqmKJaHCezZCd0ZDsdxzykWlrDdOA5So2KOzWQEjt0@dropbox.com/GdaPErAwiZdyvDpCLYF0SxH1hp8pmu8uwCc9OHwcRjnYo3emRWQEU4tBvEsOQb7qoLE0E5uc6/scl/fi/whvyzhbjo64oh5uususel/nouveau_curriculum_vitae.vbs?slCdffubJ1OJHa0cUUCqC9w4uzcD1UKSKECYOXeMvgGd15m18gcWkisdU7aFlKnLpw4zi5IOMiKbbuZmaCWdVmvAF20TkNLa3djxtNlQu1dk4os9pK4Xmo3gTa6T=X5I23GMksVG17B4G3BUMMO15SfpqMSo8QR2pDZlu5wvfjPaq9NXiAe2jm2ZfS7Png7O9FK97GPcqjeXBSk2cB4jb5UkqJmd9rtYXWzU6WvqHIwJapEN5YRgoNarMqBVOQpb98Ey0&rlkey=y8b7mx7v0ckwfagj8dyyzmpv8&dl=1&HBUJr5HBbd5JqZNT22e56fOJIS4ZCAGjASNboEMksqzu9kO3RHvzeB3M9LoPm6iwsEVgib8yDdE9iCySUiM3k9HuykwBhqfT2a=Hg8QpFu6DVa101F7P5CHwhGVPZPCIbJwmBJhE4UULoUp1c8szjeBrAWUvwTE1QiJ5QPM6jknHITXezOcGe1wJvIEQd6zZWdVuq0PnmTIsVqvOChdbhWH33cFv1bAu0kNgEQnJT1kLVA/#LqQGVWtDCLoY4r8sQ8N4D2DMG0YsHXK3QMN9c8JOIcbPkLezoa
- Sample260702-l7wekaet2n
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://drive.google.com:download_GpGjLXQsvgRC8sTt_file_Txc6ZDqmKJaHCezZCd0ZDsdxzykWlrDdOA5So2KOzWQEjt0@dropbox.com/GdaPErAwiZdyvDpCLYF0SxH1hp8pmu8uwCc9OHwcRjnYo3emRWQEU4tBvEsOQb7qoLE0E5uc6/scl/fi/whvyzhbjo64oh5uususel/nouveau_curriculum_vitae.vbs?slCdffubJ1OJHa0cUUCqC9w4uzcD1UKSKECYOXeMvgGd15m18gcWkisdU7aFlKnLpw4zi5IOMiKbbuZmaCWdVmvAF20TkNLa3djxtNlQu1dk4os9pK4Xmo3gTa6T=X5I23GMksVG17B4G3BUMMO15SfpqMSo8QR2pDZlu5wvfjPaq9NXiAe2jm2ZfS7Png7O9FK97GPcqjeXBSk2cB4jb5UkqJmd9rtYXWzU6WvqHIwJapEN5YRgoNarMqBVOQpb98Ey0&rlkey=y8b7mx7v0ckwfagj8dyyzmpv8&dl=1&HBUJr5HBbd5JqZNT22e56fOJIS4ZCAGjASNboEMksqzu9kO3RHvzeB3M9LoPm6iwsEVgib8yDdE9iCySUiM3k9HuykwBhqfT2a=Hg8QpFu6DVa101F7P5CHwhGVPZPCIbJwmBJhE4UULoUp1c8szjeBrAWUvwTE1QiJ5QPM6jknHITXezOcGe1wJvIEQd6zZWdVuq0PnmTIsVqvOChdbhWH33cFv1bAu0kNgEQnJT1kLVA/#LqQGVWtDCLoY4r8sQ8N4D2DMG0YsHXK3QMN9c8JOIcbPkLezoa
Resource
win10v2004-20260513-en
Malware Config
Targets
-
- Target https://drive.google.com:download_GpGjLXQsvgRC8sTt_file_Txc6ZDqmKJaHCezZCd0ZDsdxzykWlrDdOA5So2KOzWQEjt0@dropbox.com/GdaPErAwiZdyvDpCLYF0SxH1hp8pmu8uwCc9OHwcRjnYo3emRWQEU4tBvEsOQb7qoLE0E5uc6/scl/fi/whvyzhbjo64oh5uususel/nouveau_curriculum_vitae.vbs?slCdffubJ1OJHa0cUUCqC9w4uzcD1UKSKECYOXeMvgGd15m18gcWkisdU7aFlKnLpw4zi5IOMiKbbuZmaCWdVmvAF20TkNLa3djxtNlQu1dk4os9pK4Xmo3gTa6T=X5I23GMksVG17B4G3BUMMO15SfpqMSo8QR2pDZlu5wvfjPaq9NXiAe2jm2ZfS7Png7O9FK97GPcqjeXBSk2cB4jb5UkqJmd9rtYXWzU6WvqHIwJapEN5YRgoNarMqBVOQpb98Ey0&rlkey=y8b7mx7v0ckwfagj8dyyzmpv8&dl=1&HBUJr5HBbd5JqZNT22e56fOJIS4ZCAGjASNboEMksqzu9kO3RHvzeB3M9LoPm6iwsEVgib8yDdE9iCySUiM3k9HuykwBhqfT2a=Hg8QpFu6DVa101F7P5CHwhGVPZPCIbJwmBJhE4UULoUp1c8szjeBrAWUvwTE1QiJ5QPM6jknHITXezOcGe1wJvIEQd6zZWdVuq0PnmTIsVqvOChdbhWH33cFv1bAu0kNgEQnJT1kLVA/#LqQGVWtDCLoY4r8sQ8N4D2DMG0YsHXK3QMN9c8JOIcbPkLezoa
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.