Resubmissions
24/04/2024, 00:46
240424-a4w15sdb7x824/04/2024, 00:35
240424-axrsvada91824/04/2024, 00:19
240424-amc7psda75524/04/2024, 00:07
240424-aeq4lada341023/04/2024, 23:48
240423-3tt31sch5x823/04/2024, 23:40
240423-3ns9jach4y823/04/2024, 23:34
240423-3kkg8ach58123/04/2024, 23:30
240423-3hmjssch3510General
- Target https://cdn.discordapp.com/attachments/1216886003416043670/1232473708787011605/lmg_MlaKaifa2333_4k.zip?ex=66299616&is=66284496&hm=44c6f341634904e6a58b537f456b31c6d84ca5b66f6004148b5ed79f9480b40a&
- Sample240424-axrsvada91
Score
8/10
Malware Config
Targets
-
- Target https://cdn.discordapp.com/attachments/1216886003416043670/1232473708787011605/lmg_MlaKaifa2333_4k.zip?ex=66299616&is=66284496&hm=44c6f341634904e6a58b537f456b31c6d84ca5b66f6004148b5ed79f9480b40a&
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Registers COM server for autorun
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Legitimate hosting services abused for malware hosting/C2
-
Drops file in System32 directory