Overview

overview

8

Static

static

1

confirm2.html

windows10-2004-x64

8

confirm2.html

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    confirm2.php
  • Size 14KB
  • Sample260804-agmtyshh35
  • SHA256 ad31351066a9995cb030ef7195d0ca2b89f9cfe8cf63030a8e3f89e32ca1bfd3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoveryinstallerpersistenceransomware

Malware Config

Targets

    • Target
      confirm2.php
    • Size 14KB
    • SHA256 ad31351066a9995cb030ef7195d0ca2b89f9cfe8cf63030a8e3f89e32ca1bfd3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    discoveryinstallerpersistenceransomware

    • Downloads MZ/PE file

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks