Overview

overview

10

Static

static

1

URLScan

urlscan

1

https://www.mediafir...

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    https://www.mediafire.com/file/7nf77rfwokgb7y6/%F0%9D%9F%8E%F0%9D%90%8F%F0%9D%90%84%F0%9D%90%8D_%F0%9D%90%92%F0%9D%90%84%F0%9D%90%93%F0%9D%90%94%F0%9D%90%8F.zip/file
  • Sample260718-p52eksft6y
Score
10/10
discoveryspywarestealer

Malware Config

Targets

    • Target
      https://www.mediafire.com/file/7nf77rfwokgb7y6/%F0%9D%9F%8E%F0%9D%90%8F%F0%9D%90%84%F0%9D%90%8D_%F0%9D%90%92%F0%9D%90%84%F0%9D%90%93%F0%9D%90%94%F0%9D%90%8F.zip/file
    Score
    10/10
    discoveryspywarestealer

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

      spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks