General
- Target https://www.mediafire.com/file/hch93q8oqewv28y/respocket.zip/file
- Sample260922-1qta7sshre
Score
8/10
Malware Config
Targets
-
- Target https://www.mediafire.com/file/hch93q8oqewv28y/respocket.zip/file
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell and hide display window.
-
Executes dropped EXE
-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1Discovery
Browser Information Discovery
1Query Registry
2Remote System Discovery
1System Information Discovery
3System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
2Internet Connection Discovery
2System Time Discovery
1