Overview

overview

8

Static

static

1

URLScan

urlscan

1

https://cdn.discorda...

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target
    https://cdn.discordapp.com/attachments/1566808050579415181/1566809932811210762/Aljaheem_Theme.rar?ex=6aee8235&is=6aed30b5&hm=7735767862d5a014d5dfc3b74f1e36a1ce3760809d5bb0812217aac873b3a5f6&
  • Sample261106-gn2p1sav8l
Score
8/10
defense_evasiondiscoveryexploitransomware

Malware Config

Targets

    • Target
      https://cdn.discordapp.com/attachments/1566808050579415181/1566809932811210762/Aljaheem_Theme.rar?ex=6aee8235&is=6aed30b5&hm=7735767862d5a014d5dfc3b74f1e36a1ce3760809d5bb0812217aac873b3a5f6&
    Score
    8/10
    defense_evasiondiscoveryexploitransomware

    • Possible privilege escalation attempt

      exploit

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies file permissions

      discovery

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • File and Directory Permissions Modification: Windows File and Directory Permissions Modification

      defense_evasion

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks