General
- Target https://drive.google.com:download_SvqkyyBFIe6_file_v2gMptu9l8IzekgMH3RK6fNUeVyqR8YhVCPpYyXkEHNvAlk7QRAcdwhLZa36PldNBZ50cC6qx6RBJAzRAqOmcuuQk6BAw@dropbox.com/scl/fi/qsrftixejzbne5yb4pf9z/nouveau_curriculum_vitae.vbs?J50FnArxtkTbEJu75brxVjUv=ckr3hS3hCN0ZpC0rJ97mgdBG2tp6lpATU0rRZ46UD4HUYglD2Feo5bXupcyxExdXBY1Uyr8FKXH&rlkey=y6k9ezbtkptaxlmgy3uodatw3&dl=1&Meicih99Sd51lZeKcE15ZqytsqmAgGoCwD0rS8=NIRGWuMzS0kuDvnqT6GgK9JYayq1yvQXeH58raJwBUYOOHjzt0xL6JKpjyrlnmEsDVfoDIxU1sGCgTN9U7nhOnF2DzrnG0j7IMjyYMX5eEyDOo3xssq7MUWdtc1dDEOn/#4DnVxoNNBqnesLbLjlqOPR03i8H3Yw3ECLh62miYZECaiF0BedjwOnuHBHBkfUsoGA1F75xWvbAXq
- Sample260708-hlt3tsct2v
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://drive.google.com:download_SvqkyyBFIe6_file_v2gMptu9l8IzekgMH3RK6fNUeVyqR8YhVCPpYyXkEHNvAlk7QRAcdwhLZa36PldNBZ50cC6qx6RBJAzRAqOmcuuQk6BAw@dropbox.com/scl/fi/qsrftixejzbne5yb4pf9z/nouveau_curriculum_vitae.vbs?J50FnArxtkTbEJu75brxVjUv=ckr3hS3hCN0ZpC0rJ97mgdBG2tp6lpATU0rRZ46UD4HUYglD2Feo5bXupcyxExdXBY1Uyr8FKXH&rlkey=y6k9ezbtkptaxlmgy3uodatw3&dl=1&Meicih99Sd51lZeKcE15ZqytsqmAgGoCwD0rS8=NIRGWuMzS0kuDvnqT6GgK9JYayq1yvQXeH58raJwBUYOOHjzt0xL6JKpjyrlnmEsDVfoDIxU1sGCgTN9U7nhOnF2DzrnG0j7IMjyYMX5eEyDOo3xssq7MUWdtc1dDEOn/#4DnVxoNNBqnesLbLjlqOPR03i8H3Yw3ECLh62miYZECaiF0BedjwOnuHBHBkfUsoGA1F75xWvbAXq
Resource
win10ltsc2021-20260513-en
Malware Config
Targets
-
- Target https://drive.google.com:download_SvqkyyBFIe6_file_v2gMptu9l8IzekgMH3RK6fNUeVyqR8YhVCPpYyXkEHNvAlk7QRAcdwhLZa36PldNBZ50cC6qx6RBJAzRAqOmcuuQk6BAw@dropbox.com/scl/fi/qsrftixejzbne5yb4pf9z/nouveau_curriculum_vitae.vbs?J50FnArxtkTbEJu75brxVjUv=ckr3hS3hCN0ZpC0rJ97mgdBG2tp6lpATU0rRZ46UD4HUYglD2Feo5bXupcyxExdXBY1Uyr8FKXH&rlkey=y6k9ezbtkptaxlmgy3uodatw3&dl=1&Meicih99Sd51lZeKcE15ZqytsqmAgGoCwD0rS8=NIRGWuMzS0kuDvnqT6GgK9JYayq1yvQXeH58raJwBUYOOHjzt0xL6JKpjyrlnmEsDVfoDIxU1sGCgTN9U7nhOnF2DzrnG0j7IMjyYMX5eEyDOo3xssq7MUWdtc1dDEOn/#4DnVxoNNBqnesLbLjlqOPR03i8H3Yw3ECLh62miYZECaiF0BedjwOnuHBHBkfUsoGA1F75xWvbAXq
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.