General

  • Target
    https://cdn.discordapp.com/attachments/1375505666495479820/1509216074091200663/test_crypted.exe?ex=6a185e7f&is=6a170cff&hm=f8196ed516142f7b13cb6167a0df73cae890ec7b754cc318a9b6f22101b0c14c&
  • Sample260527-st9tcsby4y

Malware Config

Targets

    • Target
      https://cdn.discordapp.com/attachments/1375505666495479820/1509216074091200663/test_crypted.exe?ex=6a185e7f&is=6a170cff&hm=f8196ed516142f7b13cb6167a0df73cae890ec7b754cc318a9b6f22101b0c14c&
    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v16

Tasks