Overview

overview

8

Static

static

1

URLScan

urlscan

1

http://url1832.runti...

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    http://url1832.runtiva.com/ls/click?upn=u001.apkEinjucabD1wV8iENr6KtmONdnTevJ7UurDxfYlwVztjOxfY9Bh2eHHgoJhqnrJsAAwho1toEZcGZHp3vPfw-3D-3DtbQK_OoWsOjmi4xHPhsy5q4rbbivRrMOeDCglwCe3OZbQDNV6D3xFwYEyzhlBrVoTlUXz9Z0HXtWvtvU9ieziKDOIiboyaLow8NsLbD8mhYBF7XQLUf-2F-2B48SQAu9T3so4SK2jvZEECbkyBAyogjVNZzn33d1DIyUvrRssf8uN0VjkDtpVHGmfe0lQEQ-2FAGLGw1R-2Bl0f2O-2BUFsMgZPDsj6sSz6mQ-3D-3D
  • Sample260713-rtjfqsax5r
Score
8/10
adwaredefense_evasiondiscoveryspywaretrojan

Malware Config

Targets

    • Target
      http://url1832.runtiva.com/ls/click?upn=u001.apkEinjucabD1wV8iENr6KtmONdnTevJ7UurDxfYlwVztjOxfY9Bh2eHHgoJhqnrJsAAwho1toEZcGZHp3vPfw-3D-3DtbQK_OoWsOjmi4xHPhsy5q4rbbivRrMOeDCglwCe3OZbQDNV6D3xFwYEyzhlBrVoTlUXz9Z0HXtWvtvU9ieziKDOIiboyaLow8NsLbD8mhYBF7XQLUf-2F-2B48SQAu9T3so4SK2jvZEECbkyBAyogjVNZzn33d1DIyUvrRssf8uN0VjkDtpVHGmfe0lQEQ-2FAGLGw1R-2Bl0f2O-2BUFsMgZPDsj6sSz6mQ-3D-3D
    Score
    8/10
    adwaredefense_evasiondiscoveryspywaretrojan

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Checks whether UAC is enabled

      defense_evasiontrojan

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks