General
-
Target
https://cdn.discordapp.com/attachments/1277879326875844689/1289877834432512050/DiscordMsg.exe?ex=66fa6bd8&is=66f91a58&hm=1b205be9bea1d7e12e31f64aae10c72e0e43e9fa4d30c3e572550c1086522049&
-
Sample
240929-k785zszhqb
Score
8/10
Malware Config
Targets
-
-
Target
https://cdn.discordapp.com/attachments/1277879326875844689/1289877834432512050/DiscordMsg.exe?ex=66fa6bd8&is=66f91a58&hm=1b205be9bea1d7e12e31f64aae10c72e0e43e9fa4d30c3e572550c1086522049&
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Legitimate hosting services abused for malware hosting/C2
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-