General
- Target https://gamerixos.com/
- Sample260621-2kqtkafy2j
Score
8/10
Malware Config
Targets
-
- Target https://gamerixos.com/
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.