General

  • Target
    https://cdn.discordapp.com/attachments/1475510646866186262/1500526725623320789/LoginApp.exe?ex=69f8c1e9&is=69f77069&hm=35f9eb4bfabe68719585460ca7357f45efbefbbf328fab32ff140458dd097edb&
  • Sample260503-tek25af18p

Malware Config

Targets

    • Target
      https://cdn.discordapp.com/attachments/1475510646866186262/1500526725623320789/LoginApp.exe?ex=69f8c1e9&is=69f77069&hm=35f9eb4bfabe68719585460ca7357f45efbefbbf328fab32ff140458dd097edb&
    • Downloads MZ/PE file

    • Executes dropped EXE

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

MITRE ATT&CK Enterprise v16

Tasks