General
- Target http://sowtalarab.com
- Sample260710-yb7tyafy9n
Score
8/10
Malware Config
Targets
-
- Target http://sowtalarab.com
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious clipboard content.
A suspicious script was copied to clipboard.
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1