General
- Target http://tryhackeme.com
- Sample261101-ye2gbsdb63
Score
8/10
Malware Config
Targets
-
- Target http://tryhackeme.com
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Suspicious clipboard content.
A suspicious script was copied to clipboard.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1