Overview

overview

8

Static

static

1

URLScan

urlscan

1

https://www.bing.com...

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    https://www.bing.com/ck/a?!&&p=ca9b6ad9d84e234d38002e204d3c34f629d637741519bcd2f0ca351c08f3c645JmltdHM9MTc4MzEyMzIwMA&ptn=3&ver=2&hsh=4&fclid=258f86a3-1a98-662e-0c2c-92cb1b30673b&psq=wamp+offical&u=a1aHR0cHM6Ly93YW1wc2VydmVyLmF2aWF0ZWNobm8ubmV0L2luZGV4LnBocD9hZmZpY2hlPWluc3RhbGwmbGFuZz1lbg
  • Sample260704-wccdbaex8r
Score
8/10
discoveryinstallerpersistenceransomware

Malware Config

Targets

    • Target
      https://www.bing.com/ck/a?!&&p=ca9b6ad9d84e234d38002e204d3c34f629d637741519bcd2f0ca351c08f3c645JmltdHM9MTc4MzEyMzIwMA&ptn=3&ver=2&hsh=4&fclid=258f86a3-1a98-662e-0c2c-92cb1b30673b&psq=wamp+offical&u=a1aHR0cHM6Ly93YW1wc2VydmVyLmF2aWF0ZWNobm8ubmV0L2luZGV4LnBocD9hZmZpY2hlPWluc3RhbGwmbGFuZz1lbg
    Score
    8/10
    discoveryinstallerpersistenceransomware

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks