hxxp://shadowsocketxiaohuojian[.]oss-accelerate[.]aliyuncs[.]com/win-clashx64[.]zip | Triage™

Login
Reports

Overview

overview

7

Static

static

1

URLScan

urlscan

1

http://shadowsocketx...

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
http://shadowsocketxiaohuojian.oss-accelerate.aliyuncs.com/win-clashx64.zip
Sample260820-h9trzaca97

Score

7^/10

command_and_control discovery installer persistence ransomware

Static task

static1

URLScan task

urlscan1

Behavioral task

behavioral1

Sample

http://shadowsocketxiaohuojian.oss-accelerate.aliyuncs.com/win-clashx64.zip

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

14 signatures

900 seconds

command_and_control discovery installer persistence ransomware

Malware Config

Targets

- Target
  http://shadowsocketxiaohuojian.oss-accelerate.aliyuncs.com/win-clashx64.zip
Score

7^/10

command_and_control discovery installer persistence ransomware
- Outbound SSH connection to public host
  SSH is used for remote access. This may indicate SSH host discovery, encrypted C2 traffic, or data exfiltration.
  command_and_control
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Network Service Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Protocol Tunneling

Exfiltration

Impact

Tasks

static1

urlscan1

behavioral1

command_and_controldiscoveryinstallerpersistenceransomware

© 2018-2026

Terms | Privacy