Overview

overview

10

Static

static

1

URLScan

urlscan

1

https://cdn.discorda...

windows10-ltsc_2021-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    https://cdn.discordapp.com/attachments/1372220688118579290/1373499477800783894/Free_Fore_YOu.exe?ex=682aa291&is=68295111&hm=ca1f6209706e446bb57e7a374bdd1e8e4c963f167fd23e2a5b0f2cc7cce255e9&
  • Sample250518-ejmn7adk3w
Score
10/10
teardropbackdoordiscoverydroppertrojan

Malware Config

Targets

    • Target
      https://cdn.discordapp.com/attachments/1372220688118579290/1373499477800783894/Free_Fore_YOu.exe?ex=682aa291&is=68295111&hm=ca1f6209706e446bb57e7a374bdd1e8e4c963f167fd23e2a5b0f2cc7cce255e9&
    Score
    10/10
    teardropbackdoordiscoverydroppertrojan

    • Detected TEARDROP fileless dropper

      TEARDROP is a memory-only dropper which can read files/registry keys, decode an embedded payload, and load it directly into memory.

      dropperbackdoor

    • Teardrop

      Teardrop is a 64-bit DLL backdoor related to the SolarWinds breaches.

      trojanbackdoorteardrop

    • Teardrop family

      teardrop

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks