Overview

overview

8

Static

static

1

NmapVault Pro.py

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    NmapVault Pro.py
  • Size 56KB
  • Sample260715-av5a6aay91
  • SHA256 bd319949449f5169c06ee6adf049f5aef7533e683dc20d3cf5b594af4e94f2f5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
googledefense_evasionpersistencephishing

Malware Config

Targets

    • Target
      NmapVault Pro.py
    • Size 56KB
    • SHA256 bd319949449f5169c06ee6adf049f5aef7533e683dc20d3cf5b594af4e94f2f5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    googledefense_evasionpersistencephishing

    • Downloads MZ/PE file

    • A potential corporate email address has been identified in the URL: [email protected]

      phishing

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Drops desktop.ini file(s)

    • Detected potential entity reuse from brand GOOGLE.

      phishinggoogle
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks