General

  • Target
    https://cdn.discordapp.com/attachments/1483058203054051398/1522000355880075454/Maxeys_Visuals_2.6_new.rar?ex=6a46e0ca&is=6a458f4a&hm=a797710497608d0775827c9ce75f8310d5f7091665a075a13473d21b559af884&
  • Sample260701-12157agy3x

Malware Config

Targets

    • Target
      https://cdn.discordapp.com/attachments/1483058203054051398/1522000355880075454/Maxeys_Visuals_2.6_new.rar?ex=6a46e0ca&is=6a458f4a&hm=a797710497608d0775827c9ce75f8310d5f7091665a075a13473d21b559af884&
    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

MITRE ATT&CK Enterprise v16

Tasks