General
-
Target
https://cdn.discordapp.com/attachments/1301182305930313769/1301542688788709376/FREE_MS.rar?ex=6724db96&is=67238a16&hm=2f41aa7fe0e8af58166f775eb0618b450121d71ce720370c118d78c1b694dc28&
-
Sample
241031-vjmxyszlhx
Score
8/10
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://cdn.discordapp.com/attachments/1301182305930313769/1301542688788709376/FREE_MS.rar?ex=6724db96&is=67238a16&hm=2f41aa7fe0e8af58166f775eb0618b450121d71ce720370c118d78c1b694dc28&
Resource
win10v2004-20241007-en
windows10-2004-x64
15 signatures
150 seconds
Malware Config
Targets
-
-
Target
https://cdn.discordapp.com/attachments/1301182305930313769/1301542688788709376/FREE_MS.rar?ex=6724db96&is=67238a16&hm=2f41aa7fe0e8af58166f775eb0618b450121d71ce720370c118d78c1b694dc28&
Score8/10-
Possible privilege escalation attempt
-
Loads dropped DLL
-
Modifies file permissions
-
File and Directory Permissions Modification: Windows File and Directory Permissions Modification
-
Legitimate hosting services abused for malware hosting/C2
-
Drops file in System32 directory
-