General
- Target https://niederrheinticket.de/
- Sample260810-xn2ysaaa97
Score
10/10
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://niederrheinticket.de/
Resource
win10ltsc2021-20260513-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
https://niederrheinticket.de/
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Extracted
Language
-
ps1
Deobfuscated
Source
URLs
-
exe.dropper
https://rexgryflgleft.karburatorotzhigi.com/s/psc4?cl
Targets
-
- Target https://niederrheinticket.de/
Score10/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Suspicious clipboard content.
A suspicious script was copied to clipboard.
-
Obfuscated Files or Information: Command Obfuscation
Adversaries may obfuscate content during command execution to impede detection.