Overview

overview

6

Static

static

1

URLScan

urlscan

1

https://9000-firebas...

ubuntu-22.04-amd64

6

Sharing

Copy URL Twitter E-mail

General

  • Target
    https://9000-firebase-banco-supervielle-ar-1777523763723.cluster-r7kbxfo3fnev2vskbkhhphetq6.cloudworkstations.dev/
  • Sample260806-yl145sca65
Score
6/10
antivmdiscoverylinux

Malware Config

Targets

    • Target
      https://9000-firebase-banco-supervielle-ar-1777523763723.cluster-r7kbxfo3fnev2vskbkhhphetq6.cloudworkstations.dev/
    Score
    6/10
    antivmdiscovery

    • Checks hardware identifiers (DMI)

      Checks DMI information which indicate if the system is a virtual machine.

      antivm

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

      discovery

    • Reads hardware information

      Accesses system info like serial numbers, manufacturer names etc.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks