General
-
Target
https://cdn.discordapp.com/attachments/1178245402445746367/1241374126271103046/Spotify_Premium.rar?ex=66f8a5ff&is=66f7547f&hm=d86243ca702cfc10e0db83b54eee7d46bb641936a17b69fc6c39c42624092b04&
-
Sample
240928-k5z5asxgjq
Score
8/10
Malware Config
Targets
-
-
Target
https://cdn.discordapp.com/attachments/1178245402445746367/1241374126271103046/Spotify_Premium.rar?ex=66f8a5ff&is=66f7547f&hm=d86243ca702cfc10e0db83b54eee7d46bb641936a17b69fc6c39c42624092b04&
Score8/10-
Blocklisted process makes network request
-
Command and Scripting Interpreter: PowerShell
Powershell Invoke Web Request.
-
Legitimate hosting services abused for malware hosting/C2
-