hxxps://huangqing[.]net/s/file

General

Target
https://huangqing.net/s/file
Sample261113-e328zsf17m

Score

7^/10

Malware Config

Targets

- Target
  https://huangqing.net/s/file
Score

7^/10

defense_evasion persistence privilege_escalation spyware
- Executes dropped EXE
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Process Injection

1

T1055

Process Hollowing

1

T1055.012

Defense Evasion

Process Injection

1

T1055

Process Hollowing

1

T1055.012

Credential Access

Unsecured Credentials

1

T1552

Credentials In Files

1

T1552.001

Discovery

Query Registry

2

T1012

System Information Discovery

1

T1082

Lateral Movement

Collection

Data from Local System

1

T1005

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Accesses cryptocurrency files/wallets, possible credential harvesting

MITRE ATT&CK Enterprise v16

Tasks

static1

urlscan1

behavioral1