hxxp://irisbutt[.]duckdns[.]org

General

Target
http://irisbutt.duckdns.org
Sample260724-tgf6ystdng

Score

5^/10

Malware Config

Targets

- Target
  http://irisbutt.duckdns.org
Score

5^/10

adware discovery execution persistence ransomware spyware
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

1

T1059

Visual Basic

1

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1

T1112

Credential Access

Discovery

Browser Information Discovery

1

T1217

Peripheral Device Discovery

Query Registry

System Information Discovery

2

T1082

System Time Discovery

1

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes a VBScript file via the Windows Script Host.

MITRE ATT&CK Enterprise v16

Tasks

static1

urlscan1

behavioral1