A Comprehensive Malware Analysis: Deobfuscating and Analyzing a Captive ReCAPTCHA Attack
Tags
cmtmf-attack-pattern: Code Injection
attack-pattern: Data Direct Code Injection - T1540 Email Addresses - T1589.002 Hardware - T1592.001 Ip Addresses - T1590.005 Javascript - T1059.007 Keylogging - T1056.001 Keylogging - T1417.001 Malware - T1587.001 Malware - T1588.001 Powershell - T1059.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Tool - T1588.002 Powershell - T1086
Show in Graph
Common Information
Type Value
UUID 933e1d85-816a-4798-b677-a6fdddd3fce8
Fingerprint bcd8d921a9b38689
Analysis status DONE
Considered CTI value 0
Text language
Published Nov. 14, 2024, 10:09 p.m.
Added to db Nov. 14, 2024, 11:48 p.m.
Last updated Nov. 17, 2024, 6:54 p.m.
Headline A Comprehensive Malware Analysis: Deobfuscating and Analyzing a Captive ReCAPTCHA Attack
Title A Comprehensive Malware Analysis: Deobfuscating and Analyzing a Captive ReCAPTCHA Attack
Detected Hints/Tags/Attributes 77/2/13
Source URLs
Redirection Url
Details Source https://medium.com/@MrHDK/a-comprehensive-malware-analysis-deobfuscating-and-analyzing-a-captive-recaptcha-attack-ba44df6aae07?source=rss------malware-5
Details Source https://medium.com/@MrHDK/a-comprehensive-malware-analysis-deobfuscating-and-analyzing-a-captive-recaptcha-attack-ba44df6aae07?source=rss------cybersecurity-5
URL Provider
Details Provider Source level domain
Details medium.com medium.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 167 ✔ Cybersecurity on Medium https://medium.com/feed/tag/cybersecurity 2024-08-30 22:08
Details 171 ✔ Malware on Medium https://medium.com/feed/tag/malware 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 1 
all-filehub.oss-ap-southeast-1.aliyuncs.com
Details Domain 3 
textarea.select
Details Domain 1 
2nd.zip
Details Domain 1 
3nitysoftware.com
Details File 1208 
powershell.exe
Details File 31 
document.exe
Details File 49 
config.xml
Details File 1 
2nd.zip
Details File 3 
111.exe
Details IPv4 1 
17.0.91.0
Details IPv4 25 
6.0.0.0
Details Url 1 
https://all-filehub.oss-ap-southeast-1.aliyuncs.com/2nd.txt
Details Url 1 
https://all-filehub.oss-ap-southeast-1.aliyuncs.com/2nd.zip