General
- Target https://www.dropbox.com/scl/fi/byfv62d2rlnw35dtuei21/update.exe?rlkey=iefw90u57git5abrfzclz5wbu&st=r7e3d21n&dl=1
- Sample260827-232nsa1fpc
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://www.dropbox.com/scl/fi/byfv62d2rlnw35dtuei21/update.exe?rlkey=iefw90u57git5abrfzclz5wbu&st=r7e3d21n&dl=1
Resource
win11ltsc2024-20260709-en
21 signatures
150 seconds
Malware Config
Targets
-
- Target https://www.dropbox.com/scl/fi/byfv62d2rlnw35dtuei21/update.exe?rlkey=iefw90u57git5abrfzclz5wbu&st=r7e3d21n&dl=1
-
Command and Scripting Interpreter: PowerShell
Run Powershell to get system information as a root user.
-
Downloads MZ/PE file
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1