General
- Target ChatGPT_Image_Jun_20_2026_12_01_20_PM.png
- Size 2.3MB
- Sample260705-mb3z7sft7n
- SHA256 e94d21da55d12eb5c5e31ee57aa0eb097bac89a429ff92ff707a028f092a5b06
Score
8/10
Malware Config
Targets
-
- Target ChatGPT_Image_Jun_20_2026_12_01_20_PM.png
- Size 2.3MB
- SHA256 e94d21da55d12eb5c5e31ee57aa0eb097bac89a429ff92ff707a028f092a5b06
Score8/10-
Downloads MZ/PE file
-
A potential corporate email address has been identified in the URL: [email protected]
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Network Service Discovery
Attempt to gather information on host's network.
-
Network Share Discovery
Attempt to gather information on host network.
-
Drops file in System32 directory
-
Suspicious use of NtSetInformationThreadHideFromDebugger
MITRE ATT&CK Enterprise v16
Discovery
Browser Information Discovery
1Network Service Discovery
1Network Share Discovery
1Peripheral Device Discovery
2Query Registry
6System Information Discovery
6System Location Discovery
1System Language Discovery
1System Time Discovery
1