General

  • Target
    https://cdn.discordapp.com/attachments/1475510646866186262/1500521486329315389/LoginApp.exe?ex=69f8bd08&is=69f76b88&hm=14a11a930897bb2888e4d75f4508bb7adce52e7d577f7da292f26cbb8096741d&
  • Sample260503-s2ecescv7w

Malware Config

Targets

    • Target
      https://cdn.discordapp.com/attachments/1475510646866186262/1500521486329315389/LoginApp.exe?ex=69f8bd08&is=69f76b88&hm=14a11a930897bb2888e4d75f4508bb7adce52e7d577f7da292f26cbb8096741d&
    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

MITRE ATT&CK Enterprise v16

Tasks