General
- Target https://cdn.discordapp.com/attachments/1511559848930840588/1516357460779339876/5.dll?ex=6a3a426f&is=6a38f0ef&hm=cf7f0bf4d427c3eb06c233f2aac3bbbbf2c37613043d96b869baae49b82e56e2&
- Sample260622-mpd81abv8x
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://cdn.discordapp.com/attachments/1511559848930840588/1516357460779339876/5.dll?ex=6a3a426f&is=6a38f0ef&hm=cf7f0bf4d427c3eb06c233f2aac3bbbbf2c37613043d96b869baae49b82e56e2&
Resource
win11ltsc2024-20260618-ja
23 signatures
900 seconds
Malware Config
Targets
-
- Target https://cdn.discordapp.com/attachments/1511559848930840588/1516357460779339876/5.dll?ex=6a3a426f&is=6a38f0ef&hm=cf7f0bf4d427c3eb06c233f2aac3bbbbf2c37613043d96b869baae49b82e56e2&
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.