Overview

overview

8

Static

static

1

URLScan

urlscan

1

https://cdn.discorda...

windows11-21h2-x64

8

https://cdn.discorda...

ubuntu-18.04-amd64

4

https://cdn.discorda...

debian-9-armhf

https://cdn.discorda...

debian-9-mips

https://cdn.discorda...

debian-9-mipsel

Resubmissions

21-04-2024 03:24

240421-dx26csaa41 8

21-04-2024 03:09

240421-dnskkahd76 8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    https://cdn.discordapp.com/attachments/1231440804208312402/1231440887524098109/Krampus.exe?ex=6636f7b2&is=662482b2&hm=072248e040c57d6f50f4ca9d0edc0521a56014940da22fafd562acef7e2e9afd&

  • Sample

    240421-dx26csaa41

Score
8/10
antivmlinuxupx

Malware Config

Targets

    • Target

      https://cdn.discordapp.com/attachments/1231440804208312402/1231440887524098109/Krampus.exe?ex=6636f7b2&is=662482b2&hm=072248e040c57d6f50f4ca9d0edc0521a56014940da22fafd562acef7e2e9afd&

    Score
    8/10
    upxantivm

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2behavioral3behavioral4behavioral5

MITRE ATT&CK Enterprise v15

Tasks