Overview

overview

8

Static

static

1

URLScan

urlscan

1

https://download2392...

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    https://download2392.mediafire.com/zz76g4igfflgdVLm5NPGmgNljI2xEoLig6cpuqDia5d7EQ1PRpbkUogGXCo7T2ZOLHLVqAzv1WQdqlUyOVrvE7D7q-Ozj4rI6u8KjB7kfJ19-FK1CpbbAG3kA9RWvleIBn0wXpLAcKWBYpyJT6ccfboX9wIExgPnVvoYyvaO5sEZrQ/ozpbesz5rnkyr2o/full_version_35426925_local_game_installation.rar
  • Sample260723-wfmcpatfph
Score
8/10
defense_evasiondiscoveryexecutionpersistence

Malware Config

Targets

    • Target
      https://download2392.mediafire.com/zz76g4igfflgdVLm5NPGmgNljI2xEoLig6cpuqDia5d7EQ1PRpbkUogGXCo7T2ZOLHLVqAzv1WQdqlUyOVrvE7D7q-Ozj4rI6u8KjB7kfJ19-FK1CpbbAG3kA9RWvleIBn0wXpLAcKWBYpyJT6ccfboX9wIExgPnVvoYyvaO5sEZrQ/ozpbesz5rnkyr2o/full_version_35426925_local_game_installation.rar
    Score
    8/10
    defense_evasiondiscoveryexecutionpersistence

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

      execution

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks