Resubmissions
14/11/2024, 20:16
241114-y17kgasjcy814/11/2024, 20:16
241114-y16yyasjcx814/11/2024, 20:16
241114-y16ceawlep814/11/2024, 20:16
241114-y152mswlen814/11/2024, 20:16
241114-y15qwawlem814/11/2024, 20:16
241114-y15e4sseql814/11/2024, 20:16
241114-y145cawlel814/11/2024, 20:16
241114-y14tkssjcv814/11/2024, 20:01
241114-yrs1qasemc8General
- Target https://cdn.discordapp.com/attachments/1305353924756377623/1306340439401566318/extractmytoken.exe?ex=6737a157&is=67364fd7&hm=6aa355a095dc6f35d65d99f149cd7c4ce3ddaae62a6340f21503a2e25f794695&
- Sample241114-y152mswlen
Score
8/10
Malware Config
Targets
-
- Target https://cdn.discordapp.com/attachments/1305353924756377623/1306340439401566318/extractmytoken.exe?ex=6737a157&is=67364fd7&hm=6aa355a095dc6f35d65d99f149cd7c4ce3ddaae62a6340f21503a2e25f794695&
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Legitimate hosting services abused for malware hosting/C2
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1