Overview

overview

8

Static

static

1

URLScan

urlscan

1

https://cdn.discorda...

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    https://cdn.discordapp.com/attachments/1127512789418770513/1279463384948932700/CSOS_V1.zip?ex=66db2022&is=66d9cea2&hm=21cef1f90f3635458793f30db3fe0ebbcae7714acc26068073737a3003251fb4&

  • Sample

    240905-ts2xssvgjd

Score
8/10
defense_evasiondiscoveryexecution

Malware Config

Targets

    • Target

      https://cdn.discordapp.com/attachments/1127512789418770513/1279463384948932700/CSOS_V1.zip?ex=66db2022&is=66d9cea2&hm=21cef1f90f3635458793f30db3fe0ebbcae7714acc26068073737a3003251fb4&

    Score
    8/10
    defense_evasiondiscoveryexecution

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

      execution

    • Legitimate hosting services abused for malware hosting/C2

    • Obfuscated Files or Information: Command Obfuscation

      Adversaries may obfuscate content during command execution to impede detection.

      defense_evasion
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks