General
-
Target
https://cdn.discordapp.com/attachments/1239151699722108948/1239153384603389982/FIXV2.exe?ex=66545805&is=66530685&hm=4465b3c436d1a02592040ba17dca7d717236d81304ea5008b47647f43e18563f&
-
Sample
240526-l9cegafd99
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://cdn.discordapp.com/attachments/1239151699722108948/1239153384603389982/FIXV2.exe?ex=66545805&is=66530685&hm=4465b3c436d1a02592040ba17dca7d717236d81304ea5008b47647f43e18563f&
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
https://cdn.discordapp.com/attachments/1239151699722108948/1239153384603389982/FIXV2.exe?ex=66545805&is=66530685&hm=4465b3c436d1a02592040ba17dca7d717236d81304ea5008b47647f43e18563f&
Score8/10-
Downloads MZ/PE file
-
Drops startup file
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Legitimate hosting services abused for malware hosting/C2
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-