Overview

overview

6

Static

static

1

slm-esp-ps...x.html

windows10-2004-x64

6

slm-esp-ps...x.html

windows11-ltsc_2024-x64

6

slm-esp-ps...x.html

windows10-2004-x64

6

slm-esp-ps...x.html

windows11-ltsc_2024-x64

6

slm-esp-ps...x.html

windows10-2004-x64

6

slm-esp-ps...x.html

windows11-ltsc_2024-x64

6

slm-esp-ps...x.html

windows10-2004-x64

6

slm-esp-ps...x.html

windows11-ltsc_2024-x64

6

slm-esp-ps...x.html

windows10-2004-x64

3

slm-esp-ps...x.html

windows11-ltsc_2024-x64

3

slm-esp-ps...x.html

windows10-2004-x64

6

slm-esp-ps...x.html

windows11-ltsc_2024-x64

6

slm-esp-ps...x.html

windows10-2004-x64

6

slm-esp-ps...x.html

windows11-ltsc_2024-x64

6

slm-esp-ps...x.html

windows10-2004-x64

6

slm-esp-ps...x.html

windows11-ltsc_2024-x64

6

slm-esp-ps...x.html

windows10-2004-x64

6

slm-esp-ps...x.html

windows11-ltsc_2024-x64

6

slm-esp-ps...x.html

windows10-2004-x64

6

slm-esp-ps...x.html

windows11-ltsc_2024-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target
    slm-esp-ps%20%281%29.zip
  • Size 321KB
  • Sample260727-xa39pacg36
  • SHA256 c33e90245ca21d399ce918034ea12f8124b065109527986b2be0605ce6314ba5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
discovery

Malware Config

Targets

    • Target
      slm-esp-ps1/disclaimer/index.html
    • Size 2KB
    • SHA256 38fe5feb6b90c6336c0d35d5ab9f7cac57e0100dc7f61049709e0a9a38f33e7f
    • MD5 SHA1 SHA512 TLSH
    Score
    6/10
    discovery

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

      discovery
    behavioral1behavioral2
    • Target
      slm-esp-ps1/index.html
    • Size 2KB
    • SHA256 fd8689da1732fd6f282c7246cc31d9de7c2735c9dd1eb403a91320972fc96c43
    • MD5 SHA1 SHA512 TLSH
    Score
    6/10
    discovery

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

      discovery
    behavioral3behavioral4
    • Target
      slm-esp-ps1/privacy/index.html
    • Size 6KB
    • SHA256 28be0a6d0ad07e7c951ca9ed9b09747f86ac282e1977332a42ebb0e2dd07037a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discovery

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

      discovery
    behavioral5behavioral6
    • Target
      slm-esp-ps1/slmesp-yt-vsl/index.html
    • Size 6KB
    • SHA256 0b4976c39e15ccae44418c14b4c6978befaebc893633405baf05d43277b01728
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discovery

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

      discovery
    behavioral7behavioral8
    • Target
      slm-esp-ps1/terms/index.html
    • Size 6KB
    • SHA256 b2d61a34d436a625d64c130b28272fdceb19ea97d19aa5acbb98ddd1bad187af
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral10behavioral9
    • Target
      slm-esp-ps2/disclaimer/index.html
    • Size 2KB
    • SHA256 38fe5feb6b90c6336c0d35d5ab9f7cac57e0100dc7f61049709e0a9a38f33e7f
    • MD5 SHA1 SHA512 TLSH
    Score
    6/10
    discovery

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

      discovery
    behavioral11behavioral12
    • Target
      slm-esp-ps2/index.html
    • Size 2KB
    • SHA256 53cbdce8f769296d80e3e3ec376e109746d481fb4df2ccc4042fbdc31958bdfb
    • MD5 SHA1 SHA512 TLSH
    Score
    6/10
    discovery

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

      discovery
    behavioral13behavioral14
    • Target
      slm-esp-ps2/privacy/index.html
    • Size 6KB
    • SHA256 28be0a6d0ad07e7c951ca9ed9b09747f86ac282e1977332a42ebb0e2dd07037a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discovery

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

      discovery
    behavioral15behavioral16
    • Target
      slm-esp-ps2/slmesp-yt-vsl/index.html
    • Size 6KB
    • SHA256 42cb8e1361deba78dc4e1c615a47c1a87163e2483cfa635ff8d0f65e7273e181
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discovery

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

      discovery
    behavioral17behavioral18
    • Target
      slm-esp-ps2/terms/index.html
    • Size 6KB
    • SHA256 2779ae8198dfc4fb8616599d4b3b6a899663d088b4eb698fe1729868b6f89ba1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discovery

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

      discovery
    behavioral19behavioral20

MITRE ATT&CK Enterprise v16

Tasks