Overview

overview

8

Static

static

1

URLScan

urlscan

1

https://cdn.discorda...

windows10-ltsc_2021-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    https://cdn.discordapp.com/attachments/1566147183588417759/1566147286269169725/Crack_Me?ex=6ae97612&is=6ae82492&hm=3233f8fef0e91450eb1d2fb7e35dca63747686394f01c6c613c6c64f51b2c76a&
  • Sample261102-tqkkqsff42
Score
8/10
defense_evasiondiscoveryexecutionpersistenceransomware

Malware Config

Targets

    • Target
      https://cdn.discordapp.com/attachments/1566147183588417759/1566147286269169725/Crack_Me?ex=6ae97612&is=6ae82492&hm=3233f8fef0e91450eb1d2fb7e35dca63747686394f01c6c613c6c64f51b2c76a&
    Score
    8/10
    defense_evasiondiscoveryexecutionpersistenceransomware

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Obfuscated Files or Information: Command Obfuscation

      Adversaries may obfuscate content during command execution to impede detection.

      defense_evasion

    • Suspicious use of NtSetInformationThreadHideFromDebugger

      defense_evasion
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks