General
- Target https://www.nature-vedic.com/
- Sample260723-nrn2naxepf
Score
8/10
Malware Config
Targets
-
- Target https://www.nature-vedic.com/
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Suspicious clipboard content.
A suspicious script was copied to clipboard.
-
Checks hardware identifiers (DMI)
Checks DMI information which indicate if the system is a virtual machine.
-
Drops desktop.ini file(s)
-
Reads hardware information
Accesses system info like serial numbers, manufacturer names etc.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Resource Forking
1Virtualization/Sandbox Evasion
2System Checks
2