hxxp://shadowsocketxiaohuojian[.]oss-accelerate[.]aliyuncs[.]com | Triage™

Login
Reports

Overview

overview

7

Static

static

1

URLScan

urlscan

1

http://shadowsocketx...

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
http://shadowsocketxiaohuojian.oss-accelerate.aliyuncs.com
Sample260825-j76t7ayeme

Score

7^/10

command_and_control discovery installer persistence ransomware

Static task

static1

URLScan task

urlscan1

Behavioral task

behavioral1

Sample

http://shadowsocketxiaohuojian.oss-accelerate.aliyuncs.com

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

21 signatures

900 seconds

command_and_control discovery installer persistence ransomware

Malware Config

Targets

- Target
  http://shadowsocketxiaohuojian.oss-accelerate.aliyuncs.com
Score

7^/10

command_and_control discovery installer persistence ransomware
- Executes dropped EXE
- Loads dropped DLL
- Outbound SSH connection to public host
  SSH is used for remote access. This may indicate SSH host discovery, encrypted C2 traffic, or data exfiltration.
  command_and_control
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Network Service Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Protocol Tunneling

Exfiltration

Impact

Tasks

static1

urlscan1

behavioral1

command_and_controldiscoveryinstallerpersistenceransomware

© 2018-2026

Terms | Privacy