General
-
Target
https://www.youtube.com/redirect?event=comments&redir_token=QUFFLUhqbVVHOGJJRHJObjNBTVNqazl1czBkbUdhT09RQXxBQ3Jtc0ttZnhWZ01XZXZrRzdpVS1meUNpSzVPT2hvcXBQU0tQSzNBbzlkS1M5UUZvOHlCSlVhZjJ2Qk56VmgwRmRzXy1id0xFZnNXV09HamVYbjJvUzBSbVd1THR5YnpOS0JUVmttT3hkX2dvRWlyMUoyeWZEMA&q=https%3A%2F%2Fmega.nz%2Ffile%2Fifg2VBpB%23x0JGHqzCEaRhk1GiWUlk-7pfsXo_f_64AjPDlBKkrVQ&stzid=UgzlaKtJ3torA9S7-sZ4AaABAg
-
Sample
240501-sg99cshf6z
Malware Config
Targets
-
-
Target
https://www.youtube.com/redirect?event=comments&redir_token=QUFFLUhqbVVHOGJJRHJObjNBTVNqazl1czBkbUdhT09RQXxBQ3Jtc0ttZnhWZ01XZXZrRzdpVS1meUNpSzVPT2hvcXBQU0tQSzNBbzlkS1M5UUZvOHlCSlVhZjJ2Qk56VmgwRmRzXy1id0xFZnNXV09HamVYbjJvUzBSbVd1THR5YnpOS0JUVmttT3hkX2dvRWlyMUoyeWZEMA&q=https%3A%2F%2Fmega.nz%2Ffile%2Fifg2VBpB%23x0JGHqzCEaRhk1GiWUlk-7pfsXo_f_64AjPDlBKkrVQ&stzid=UgzlaKtJ3torA9S7-sZ4AaABAg
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-