General

  • Target
    https://cdn.discordapp.com/attachments/1511559848930840588/1516357460779339876/5.dll?ex=6a3a426f&is=6a38f0ef&hm=cf7f0bf4d427c3eb06c233f2aac3bbbbf2c37613043d96b869baae49b82e56e2&
  • Sample260622-mpd81abv8x

Malware Config

Targets

    • Target
      https://cdn.discordapp.com/attachments/1511559848930840588/1516357460779339876/5.dll?ex=6a3a426f&is=6a38f0ef&hm=cf7f0bf4d427c3eb06c233f2aac3bbbbf2c37613043d96b869baae49b82e56e2&
    • Downloads MZ/PE file

    • Executes dropped EXE

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

MITRE ATT&CK Enterprise v16

Tasks