Overview

overview

8

Static

static

1

URLScan

urlscan

https://www.google.c...

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    https://www.google.com/aclk?sa=L&ai=DChsSEwiJtYHkpcyVAxVkMwgFHTBgE2oYACICCAIQABoCbWQ&co=1&ase=2&gclid=CjwKCAjw08fSBhA7EiwAfbQTsHhlCCqbU8mqXX1q6V2KNMLDzrbWNtEUMBeOvzrnTS-srlZgfb7cqRoCQl4QAvD_BwE&cid=CAASugHkaLnK9iZHYR0i1LIEOjdXUg5LmhYWqDcY_jsFYDpLXKWEC1sc1LkTWK4uedoQXqfy_1lKUX8gZKITIQEPp7d2uWKc8dULkxa8sbv-qoybuffgYaCof-gKOrpnjten_Acnb8oRMCcR4QCy7J9vzXS2ezDH74IezBr-ARtu1rOgszCqVMVUc4k5zcJVArz-VcW_2wnEQEOEVUIxOlWH2yJThLo3ll-9Z8M_1E_xNyWro2MPXi0knm4gj64&cce=2&category=acrcp_v1_32&sig=AOD64_2FlP66fNf-TZ6Eg1VTJVbO5oh72w&q&nis=4&adurl&ved=2ahUKEwjhovrjpcyVAxVlg4kEHTHVKVUQ0Qx6BAhyEAE
  • Sample260712-e2dt1acy5p
Score
8/10
discovery

Malware Config

Targets

    • Target
      https://www.google.com/aclk?sa=L&ai=DChsSEwiJtYHkpcyVAxVkMwgFHTBgE2oYACICCAIQABoCbWQ&co=1&ase=2&gclid=CjwKCAjw08fSBhA7EiwAfbQTsHhlCCqbU8mqXX1q6V2KNMLDzrbWNtEUMBeOvzrnTS-srlZgfb7cqRoCQl4QAvD_BwE&cid=CAASugHkaLnK9iZHYR0i1LIEOjdXUg5LmhYWqDcY_jsFYDpLXKWEC1sc1LkTWK4uedoQXqfy_1lKUX8gZKITIQEPp7d2uWKc8dULkxa8sbv-qoybuffgYaCof-gKOrpnjten_Acnb8oRMCcR4QCy7J9vzXS2ezDH74IezBr-ARtu1rOgszCqVMVUc4k5zcJVArz-VcW_2wnEQEOEVUIxOlWH2yJThLo3ll-9Z8M_1E_xNyWro2MPXi0knm4gj64&cce=2&category=acrcp_v1_32&sig=AOD64_2FlP66fNf-TZ6Eg1VTJVbO5oh72w&q&nis=4&adurl&ved=2ahUKEwjhovrjpcyVAxVlg4kEHTHVKVUQ0Qx6BAhyEAE
    Score
    8/10
    discovery

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Network Share Discovery

      Attempt to gather information on host network.

      discovery

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks