General
- Target https://cdn.discordapp.com/attachments/1483058203054051398/1522000355880075454/Maxeys_Visuals_2.6_new.rar?ex=6a46e0ca&is=6a458f4a&hm=a797710497608d0775827c9ce75f8310d5f7091665a075a13473d21b559af884&
- Sample260701-12157agy3x
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://cdn.discordapp.com/attachments/1483058203054051398/1522000355880075454/Maxeys_Visuals_2.6_new.rar?ex=6a46e0ca&is=6a458f4a&hm=a797710497608d0775827c9ce75f8310d5f7091665a075a13473d21b559af884&
Resource
win11ltsc2024-20260629-en
25 signatures
150 seconds
Malware Config
Targets
-
- Target https://cdn.discordapp.com/attachments/1483058203054051398/1522000355880075454/Maxeys_Visuals_2.6_new.rar?ex=6a46e0ca&is=6a458f4a&hm=a797710497608d0775827c9ce75f8310d5f7091665a075a13473d21b559af884&
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.