Overview

overview

8

Static

static

URLScan

urlscan

1

https://cdn.discorda...

windows7-x64

1

https://cdn.discorda...

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    https://cdn.discordapp.com/attachments/1026655316064096336/1027368991930458152/Build.zip

  • Sample

    221006-ql3nzahfhm

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      https://cdn.discordapp.com/attachments/1026655316064096336/1027368991930458152/Build.zip

    Score
    8/10
    vmprotect

    • Downloads MZ/PE file

    • Executes dropped EXE

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks