Overview

overview

10

Static

static

1

URLScan

urlscan

1

https://www.dropbox....

windows10-ltsc_2021-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    https://www.dropbox.com/scl/fi/qzsk315p3xsrh0vv4n0d7/Software-Cloud.zip?rlkey=97v5a0lc3cg6ssn1wtylr04p1&st=ov9ylmz1&dl=1
  • Sample260812-x8mdtsdn5s
Score
10/10
discoverypersistenceransomwarespywarestealer

Malware Config

Targets

    • Target
      https://www.dropbox.com/scl/fi/qzsk315p3xsrh0vv4n0d7/Software-Cloud.zip?rlkey=97v5a0lc3cg6ssn1wtylr04p1&st=ov9ylmz1&dl=1
    Score
    10/10
    discoverypersistenceransomwarespywarestealer

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks