hxxps://archive[.]org/download/sof_1[.]0[.]4/csaudiointcsof[.]zip | Triage™

Login
Reports

Overview

overview

7

Static

static

1

URLScan

urlscan

1

https://archive.org/...

windows10-2004-x64

7

https://archive.org/...

windows10-ltsc_2021-x64

7

https://archive.org/...

windows11-21h2-x64

7

https://archive.org/...

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
https://archive.org/download/sof_1.0.4/csaudiointcsof.zip
Sample260724-xble9sab94

Score

7^/10

defense_evasion discovery execution persistence ransomware

Static task

static1

URLScan task

urlscan1

Behavioral task

behavioral1

Sample

https://archive.org/download/sof_1.0.4/csaudiointcsof.zip

Resource

win10v2004-20260513-en

windows10-2004-x64

25 signatures

150 seconds

defense_evasion discovery execution persistence

Behavioral task

behavioral2

Sample

https://archive.org/download/sof_1.0.4/csaudiointcsof.zip

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

28 signatures

150 seconds

defense_evasion discovery execution persistence ransomware

Behavioral task

behavioral3

Sample

https://archive.org/download/sof_1.0.4/csaudiointcsof.zip

Resource

win11-20260513-en

windows11-21h2-x64

24 signatures

150 seconds

defense_evasion discovery execution persistence

Behavioral task

behavioral4

Sample

https://archive.org/download/sof_1.0.4/csaudiointcsof.zip

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

25 signatures

150 seconds

defense_evasion discovery execution persistence ransomware

Malware Config

Targets

- Target
  https://archive.org/download/sof_1.0.4/csaudiointcsof.zip
Score

7^/10

defense_evasion discovery execution persistence ransomware
- Creates new service(s)
  persistence execution
- Executes dropped EXE
- Loads dropped DLL
- Stops running service(s)
  defense_evasion execution
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops file in System32 directory
behavioral1 behavioral2 behavioral3 behavioral4

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Credential Access

Discovery

Browser Information Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

urlscan1

behavioral1

defense_evasiondiscoveryexecutionpersistence

behavioral2

defense_evasiondiscoveryexecutionpersistenceransomware

behavioral3

defense_evasiondiscoveryexecutionpersistence

behavioral4

defense_evasiondiscoveryexecutionpersistenceransomware

© 2018-2026

Terms | Privacy