General

  • Target
    https://cdn.discordapp.com/attachments/1501670413095141548/1504166962228367490/VendettaMenu.dll?ex=6a0beee5&is=6a0a9d65&hm=9751e71803e7e8dcadc4b9103ffa654d1e1fbb123a287fb3abdb43e11dc8fa07&
  • Sample260518-scf5qaev8t

Malware Config

Targets

    • Target
      https://cdn.discordapp.com/attachments/1501670413095141548/1504166962228367490/VendettaMenu.dll?ex=6a0beee5&is=6a0a9d65&hm=9751e71803e7e8dcadc4b9103ffa654d1e1fbb123a287fb3abdb43e11dc8fa07&
    • Downloads MZ/PE file

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v16

Tasks