hxxps://l[.]facebook[.]com/l[.]php?u=AUCqA1QJhIM5-lLOY9qKvofHhTTRGN2hDalqw_ExmCDgN5en0gu_nl51B8wqd4vz3HMjCskvospuanFa5ZKyis8N7Xt3aMPj0QMa-BxggB0V9q5nxfWRehLDnxjbVycZqSNaVFn3Y8TTzkCUvkj2UpsfxcmUAnXafmCF_NGlOzCzmcWfVDQhnClLqxwEC0hZ2t57d8YYCVLApEJJ0gjZcA3_yW43IMRK2_nQxSqamqShxMNYNBqZSBBcHzCNPv-YCbQyCumiM-hyCOm9wQffDBbrf88WpHQPmLcmoBCdLT9KSSk591prF4YSirnjZQ5X94uX5_xnS-258pk9JIhKB_z2McP3wAyBWwW9qzgH3ePHyUPx888IS3I6pziiTRef69j7-BgBwwHmFF1WIRWKkZehfQUX9WxMBUAFVJQsJk21fbO0ahcB2xM61X4aDYXAZPVVu7IJVWQrMQGRIRsOKswVbdRYR4TpqIlMiIgrKR-owh2mWk1kWhQq-jbZFjc5XiF7RhhC8yRoKh7-bSD1fSlgdr-gnqs3_jt-l6K3kcgyjCTYtkyn0Uk1qH3N5l3tNo3YarnWcbjh-INXJSFsAv1IoSHm8t16QrrEF2c6crrbvv2LJWVU4ZSqKIs0XZVxG7x63xTWXkdXww4pU2QGj3u9DaWN7Wh92hJzmYL4lmEwWQ80yy4t7z7SxdmzZlgSKkYI0WwVQJLsnY8tIJQJ2bdYo3ndzZjm&h=AUCwfB3FPLq2MPaRR_iI6m-9XPaGwMSh7pu6Vk6jr6scK5PplGR3RcIkEUz22DZpayklhaoadvGLyDQef7lXpHaNXQNZDvXtBPus9-YqnPhF_sv9wFFyPY14QZU06JZvvGwa4U7x2A&__cft__0=AZZzkQeHq3zvU1c5tYdRyJ4u48CC5wGGnGfIC2LSZvtFHsNsrvI4n1Q_-2KNwMC6eZTtotroGIVszfvA_rOPZJnR3Pz2eVmwIzLz0z-w9EzB2C6LHvUG62MCmrTF-VrCbGrjvTv1TWRfMIUCCqAeAGL0CcV23O5GihfkFkDP8NuwDz50ijnMh0dzOjmIc3hYRIo_2ZcKJmvp_oKHzqZIAIdXc3g_LfDPmaxfsQiAHxsHjWj4w-jftozrw39sSQpNz0tNsxxrcGMDbCAXy1uaFrNt&__tn__=H%2CW0H-R

Sharing

Copy URL Twitter E-mail

General

Target
https://l.facebook.com/l.php?u=AUCqA1QJhIM5-lLOY9qKvofHhTTRGN2hDalqw_ExmCDgN5en0gu_nl51B8wqd4vz3HMjCskvospuanFa5ZKyis8N7Xt3aMPj0QMa-BxggB0V9q5nxfWRehLDnxjbVycZqSNaVFn3Y8TTzkCUvkj2UpsfxcmUAnXafmCF_NGlOzCzmcWfVDQhnClLqxwEC0hZ2t57d8YYCVLApEJJ0gjZcA3_yW43IMRK2_nQxSqamqShxMNYNBqZSBBcHzCNPv-YCbQyCumiM-hyCOm9wQffDBbrf88WpHQPmLcmoBCdLT9KSSk591prF4YSirnjZQ5X94uX5_xnS-258pk9JIhKB_z2McP3wAyBWwW9qzgH3ePHyUPx888IS3I6pziiTRef69j7-BgBwwHmFF1WIRWKkZehfQUX9WxMBUAFVJQsJk21fbO0ahcB2xM61X4aDYXAZPVVu7IJVWQrMQGRIRsOKswVbdRYR4TpqIlMiIgrKR-owh2mWk1kWhQq-jbZFjc5XiF7RhhC8yRoKh7-bSD1fSlgdr-gnqs3_jt-l6K3kcgyjCTYtkyn0Uk1qH3N5l3tNo3YarnWcbjh-INXJSFsAv1IoSHm8t16QrrEF2c6crrbvv2LJWVU4ZSqKIs0XZVxG7x63xTWXkdXww4pU2QGj3u9DaWN7Wh92hJzmYL4lmEwWQ80yy4t7z7SxdmzZlgSKkYI0WwVQJLsnY8tIJQJ2bdYo3ndzZjm&h=AUCwfB3FPLq2MPaRR_iI6m-9XPaGwMSh7pu6Vk6jr6scK5PplGR3RcIkEUz22DZpayklhaoadvGLyDQef7lXpHaNXQNZDvXtBPus9-YqnPhF_sv9wFFyPY14QZU06JZvvGwa4U7x2A&__cft__0=AZZzkQeHq3zvU1c5tYdRyJ4u48CC5wGGnGfIC2LSZvtFHsNsrvI4n1Q_-2KNwMC6eZTtotroGIVszfvA_rOPZJnR3Pz2eVmwIzLz0z-w9EzB2C6LHvUG62MCmrTF-VrCbGrjvTv1TWRfMIUCCqAeAGL0CcV23O5GihfkFkDP8NuwDz50ijnMh0dzOjmIc3hYRIo_2ZcKJmvp_oKHzqZIAIdXc3g_LfDPmaxfsQiAHxsHjWj4w-jftozrw39sSQpNz0tNsxxrcGMDbCAXy1uaFrNt&__tn__=H%2CW0H-R
Sample260728-chal5awzf1

Score

6^/10

Malware Config

Targets

- Target
  https://l.facebook.com/l.php?u=AUCqA1QJhIM5-lLOY9qKvofHhTTRGN2hDalqw_ExmCDgN5en0gu_nl51B8wqd4vz3HMjCskvospuanFa5ZKyis8N7Xt3aMPj0QMa-BxggB0V9q5nxfWRehLDnxjbVycZqSNaVFn3Y8TTzkCUvkj2UpsfxcmUAnXafmCF_NGlOzCzmcWfVDQhnClLqxwEC0hZ2t57d8YYCVLApEJJ0gjZcA3_yW43IMRK2_nQxSqamqShxMNYNBqZSBBcHzCNPv-YCbQyCumiM-hyCOm9wQffDBbrf88WpHQPmLcmoBCdLT9KSSk591prF4YSirnjZQ5X94uX5_xnS-258pk9JIhKB_z2McP3wAyBWwW9qzgH3ePHyUPx888IS3I6pziiTRef69j7-BgBwwHmFF1WIRWKkZehfQUX9WxMBUAFVJQsJk21fbO0ahcB2xM61X4aDYXAZPVVu7IJVWQrMQGRIRsOKswVbdRYR4TpqIlMiIgrKR-owh2mWk1kWhQq-jbZFjc5XiF7RhhC8yRoKh7-bSD1fSlgdr-gnqs3_jt-l6K3kcgyjCTYtkyn0Uk1qH3N5l3tNo3YarnWcbjh-INXJSFsAv1IoSHm8t16QrrEF2c6crrbvv2LJWVU4ZSqKIs0XZVxG7x63xTWXkdXww4pU2QGj3u9DaWN7Wh92hJzmYL4lmEwWQ80yy4t7z7SxdmzZlgSKkYI0WwVQJLsnY8tIJQJ2bdYo3ndzZjm&h=AUCwfB3FPLq2MPaRR_iI6m-9XPaGwMSh7pu6Vk6jr6scK5PplGR3RcIkEUz22DZpayklhaoadvGLyDQef7lXpHaNXQNZDvXtBPus9-YqnPhF_sv9wFFyPY14QZU06JZvvGwa4U7x2A&__cft__0=AZZzkQeHq3zvU1c5tYdRyJ4u48CC5wGGnGfIC2LSZvtFHsNsrvI4n1Q_-2KNwMC6eZTtotroGIVszfvA_rOPZJnR3Pz2eVmwIzLz0z-w9EzB2C6LHvUG62MCmrTF-VrCbGrjvTv1TWRfMIUCCqAeAGL0CcV23O5GihfkFkDP8NuwDz50ijnMh0dzOjmIc3hYRIo_2ZcKJmvp_oKHzqZIAIdXc3g_LfDPmaxfsQiAHxsHjWj4w-jftozrw39sSQpNz0tNsxxrcGMDbCAXy1uaFrNt&__tn__=H%2CW0H-R
Score

6^/10

antivm discovery
- Checks hardware identifiers (DMI)
  Checks DMI information which indicate if the system is a virtual machine.
  antivm
- Reads hardware information
  Accesses system info like serial numbers, manufacturer names etc.
  discovery
behavioral1 behavioral2 behavioral3 behavioral4

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Credential Access

Discovery

System Information Discovery

T1082

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks hardware identifiers (DMI)

Reads hardware information

MITRE ATT&CK Enterprise v16

Tasks

static1

urlscan1

behavioral1

behavioral2

behavioral3

behavioral4