Overview

overview

7

Static

static

1

URLScan

urlscan

1

https://cdn.discorda...

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    https://cdn.discordapp.com/attachments/1234204770106081320/1234517237365346404/foxyrun.rar?ex=66310545&is=662fb3c5&hm=58e89d3274e10b20957071f9727113e23b2e17eb5d21e600ebf9af17155456dc&

  • Sample

    240429-xydzpsae94

Score
7/10
ransomwarespywarestealer

Malware Config

Targets

    • Target

      https://cdn.discordapp.com/attachments/1234204770106081320/1234517237365346404/foxyrun.rar?ex=66310545&is=662fb3c5&hm=58e89d3274e10b20957071f9727113e23b2e17eb5d21e600ebf9af17155456dc&

    Score
    7/10
    ransomwarespywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Sets desktop wallpaper using registry

      ransomware
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks