General
- Target https://pub-77277de4e8934e3a9c140fbb9967851e.r2.dev/d7844894-e87a-4478-94ed-ee6c44e89f8e/fbb426dd-d536-4f38-815d-3fa0ed81a3f4/9e43b4f5-42db-46cf-bbb4-e8f503b9e156/3390ef26-13de-40fc-a603-51947d97e3dd/4d212b27-2fd2-4832-bb5f-b1dd1c012ecc/2ea4bb1b-7917-4460-aca7-5ac38940ac5f/b2b0fbc0-fbbd-4f57-b9af-c6208c91fb0c/bf34272d-2608-40c8-bd3a-995581560906/9af0901c-a99f-4a18-b570-3939167e54c0/091b5c12-096f-4bbe-b454-f3ff7fceae68/6d72d604-2602-49b0-af6d-553b7da8498a/f5f12c59-021c-409e-9784-1d9af67f5e1a/F-urosario-OnlineBackup_o_backup_v8.7.0.224_oid53e38f6d-3ad3-47c5-b366-fe4e4f837716_fidingmuyOyikukE-WXnaYAHQ.exe
- Sample260806-ynf7rahq5w
Score
8/10
Malware Config
Targets
-
- Target https://pub-77277de4e8934e3a9c140fbb9967851e.r2.dev/d7844894-e87a-4478-94ed-ee6c44e89f8e/fbb426dd-d536-4f38-815d-3fa0ed81a3f4/9e43b4f5-42db-46cf-bbb4-e8f503b9e156/3390ef26-13de-40fc-a603-51947d97e3dd/4d212b27-2fd2-4832-bb5f-b1dd1c012ecc/2ea4bb1b-7917-4460-aca7-5ac38940ac5f/b2b0fbc0-fbbd-4f57-b9af-c6208c91fb0c/bf34272d-2608-40c8-bd3a-995581560906/9af0901c-a99f-4a18-b570-3939167e54c0/091b5c12-096f-4bbe-b454-f3ff7fceae68/6d72d604-2602-49b0-af6d-553b7da8498a/f5f12c59-021c-409e-9784-1d9af67f5e1a/F-urosario-OnlineBackup_o_backup_v8.7.0.224_oid53e38f6d-3ad3-47c5-b366-fe4e4f837716_fidingmuyOyikukE-WXnaYAHQ.exe
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies file permissions
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Defense Evasion
File and Directory Permissions Modification
1Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1