General
- Target https://www.up-4ever.net/njfhfs8im9y3
- Sample260801-dwct3swhnc
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://www.up-4ever.net/njfhfs8im9y3
Resource
win11ltsc2024-20260710-en
24 signatures
900 seconds
Malware Config
Targets
-
- Target https://www.up-4ever.net/njfhfs8im9y3
-
Indirect Command Execution
Adversaries may abuse utilities that allow for command execution to bypass security restrictions that limit the use of command-line interpreters.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1