Overview

overview

8

Static

static

1

URLScan

urlscan

1

https://l.sparkpcgam...

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    https://l.sparkpcgames.com/opera/ksp/themes/?tl=www.playerhq.co&cep=4_czaWeKJmu9VbhbfV3qZv__60Ww0HDrfvOoqfKJn-QD-nH0JiOuBk3bWneYafSUJdT3v4KJv36Z4PiNkixdaZf-P6ppYVUjVgbsQUAyKhkAxpyXpfxhJxUZngyAZU1-zFCHfcJ9_qQXKDFbVVb5YCRYbQ-IHoNoGnUg5p_k_KOMHXm3CSj3ODjQ5QoSBUak_-NFdmEuR_8clGbU6vRYWl_wiporxrV5LKvtTiiRJ3RSGjND_RMDQ0dMtBbXK6ap6kLFoK_LZe-76yUj5X-uMtsiOANZMlikPR0V3k_fe8MJ5uxjqZc4QqNkhUHKeug5mg2gNzmM4PCS9RecLqamo9ZmGhAONXGVxT2djYdy-VlkMsmSVadcJGb3pWkBkpl6wfvVsEBYc65vvjdYG7i4Tl6LeAn01JbZgIKDn8sIqMER5rFQsHAJBORHP1nP4zFkZGRMbpsbmZXtJUgBhvxHO-VAHQP9U9cK3cZsbmquJmjBlCwvzEIaKT9yPZDA-IzBD0tUvSoz9p82jSj2bdmaDnQGDvcF8PjdwU9adlvvlxfEEHoa1B-sXZRbPAraVg9c48w3ftVsD6cTvzU1ioU8YfKk1a9fZYx8kmjLNhbnl1FOPwEJxkKykCagalSP14UzcxPUbEiwo_GzebvHiBegTdc7X6apnVxY8luqToB3RHY&lptoken=17f583a5698680b32516&zone=11283998-3775522587-4269441498&campaign=459609408&ip=140.213.187.201&banner=24046846&ssp=Adcash&mzone=11283998&ntk=29a&redirection_cost=0.000720405&clickid=1783696224100000ID8cd5bbc995032be3I
  • Sample260710-sp67nses6w
Score
8/10
defense_evasiondiscoveryspywarestealertrojan

Malware Config

Targets

    • Target
      https://l.sparkpcgames.com/opera/ksp/themes/?tl=www.playerhq.co&cep=4_czaWeKJmu9VbhbfV3qZv__60Ww0HDrfvOoqfKJn-QD-nH0JiOuBk3bWneYafSUJdT3v4KJv36Z4PiNkixdaZf-P6ppYVUjVgbsQUAyKhkAxpyXpfxhJxUZngyAZU1-zFCHfcJ9_qQXKDFbVVb5YCRYbQ-IHoNoGnUg5p_k_KOMHXm3CSj3ODjQ5QoSBUak_-NFdmEuR_8clGbU6vRYWl_wiporxrV5LKvtTiiRJ3RSGjND_RMDQ0dMtBbXK6ap6kLFoK_LZe-76yUj5X-uMtsiOANZMlikPR0V3k_fe8MJ5uxjqZc4QqNkhUHKeug5mg2gNzmM4PCS9RecLqamo9ZmGhAONXGVxT2djYdy-VlkMsmSVadcJGb3pWkBkpl6wfvVsEBYc65vvjdYG7i4Tl6LeAn01JbZgIKDn8sIqMER5rFQsHAJBORHP1nP4zFkZGRMbpsbmZXtJUgBhvxHO-VAHQP9U9cK3cZsbmquJmjBlCwvzEIaKT9yPZDA-IzBD0tUvSoz9p82jSj2bdmaDnQGDvcF8PjdwU9adlvvlxfEEHoa1B-sXZRbPAraVg9c48w3ftVsD6cTvzU1ioU8YfKk1a9fZYx8kmjLNhbnl1FOPwEJxkKykCagalSP14UzcxPUbEiwo_GzebvHiBegTdc7X6apnVxY8luqToB3RHY&lptoken=17f583a5698680b32516&zone=11283998-3775522587-4269441498&campaign=459609408&ip=140.213.187.201&banner=24046846&ssp=Adcash&mzone=11283998&ntk=29a&redirection_cost=0.000720405&clickid=1783696224100000ID8cd5bbc995032be3I
    Score
    8/10
    defense_evasiondiscoveryspywarestealertrojan

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks