General
- Target https://url3038.axs.com/ls/click?upn=u001.M-2B7Q7c-2FEXeGHZb54cGSVIRx9kCOAaoVq-2BKpixypfZcVBu8kAQKch80g8QfPsotdDTHHavMecpBaNLvJcD4i-2B1jMi-2FY0YWdvh82BHVf-2BVwUxnhyfdn-2FiCKgUyx7-2BnmWXUI2wcjT9OW7cTy1jgUVh1D1l-2B-2F-2FrOUtn2aabx5-2BbXMpVFxcO8fxjnJ3MPojWxDoxSvTXn_xC3Ia16GoQ52pIF4pX1C9yUgGnNKU6dxvUyd7353anl5nIeDe1j5-2F6Zw6q-2BNItbh5YhnQWJuf5IXfW2QbveR-2F2q4nbs3wl1D6YAZGYBYRodibWvJOH1-2BcNJni39DWQR24wn883QGF0c-2F5pNECnyLFIImsEAD6YFEJhVuolx0x1yGT-2Fnvwvu1G1GGvAWcBNRSneCFwxru8yHy6Re7PjPhL7ug0QM2ki5333duQikC1UcjgyalFpSpK4wEJsjweeEAW1xIsY3PJax-2BpWpAJmz-2B5nUti5UnMUepB5mz-2BebtftH-2B9QqdMEsJe-2FULFGPv6BzvdwLcENKi8DbcJnehApzDqCygvIbr4p9AN4XRz77nYDE-3D
- Sample260709-a5l8bsa19p
Score
8/10
Malware Config
Targets
-
- Target https://url3038.axs.com/ls/click?upn=u001.M-2B7Q7c-2FEXeGHZb54cGSVIRx9kCOAaoVq-2BKpixypfZcVBu8kAQKch80g8QfPsotdDTHHavMecpBaNLvJcD4i-2B1jMi-2FY0YWdvh82BHVf-2BVwUxnhyfdn-2FiCKgUyx7-2BnmWXUI2wcjT9OW7cTy1jgUVh1D1l-2B-2F-2FrOUtn2aabx5-2BbXMpVFxcO8fxjnJ3MPojWxDoxSvTXn_xC3Ia16GoQ52pIF4pX1C9yUgGnNKU6dxvUyd7353anl5nIeDe1j5-2F6Zw6q-2BNItbh5YhnQWJuf5IXfW2QbveR-2F2q4nbs3wl1D6YAZGYBYRodibWvJOH1-2BcNJni39DWQR24wn883QGF0c-2F5pNECnyLFIImsEAD6YFEJhVuolx0x1yGT-2Fnvwvu1G1GGvAWcBNRSneCFwxru8yHy6Re7PjPhL7ug0QM2ki5333duQikC1UcjgyalFpSpK4wEJsjweeEAW1xIsY3PJax-2BpWpAJmz-2B5nUti5UnMUepB5mz-2BebtftH-2B9QqdMEsJe-2FULFGPv6BzvdwLcENKi8DbcJnehApzDqCygvIbr4p9AN4XRz77nYDE-3D
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.