General
- Target Capitalism_Lab_ENG_to_PT-master.zip
- Size 554KB
- Sample260817-fb7j3ael61
- SHA256 e430b7423f2ea4f283270251bd4bdfe8cc9bf3792696a7f75d22e0e94adb63cb
Score
8/10
Malware Config
Targets
-
- Target Capitalism_Lab_ENG_to_PT-master/source/Release/font/Notice.html
- Size 10KB
- SHA256 a76f423ec0493a856dacaf2daf470c9021def5416b2beba3560b5a043d1df08e
Score8/10-
Contacts a large (624) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Downloads MZ/PE file
-
A potential corporate email address has been identified in the URL: [email protected]
-
Executes dropped EXE
-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Mark of the Web detected: This indicates that the page was originally saved or cloned.
MITRE ATT&CK Enterprise v16
Discovery
Browser Information Discovery
1Network Service Discovery
1Peripheral Device Discovery
1Query Registry
4System Information Discovery
4System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
1Internet Connection Discovery
1System Time Discovery
1