Overview

overview

8

Static

static

1

URLScan

urlscan

1

https://cdn.discorda...

windows10-ltsc_2021-x64

8

https://cdn.discorda...

windows11-21h2-x64

8

Resubmissions

10/07/2026, 18:56

260710-xlltsae18n8

10/07/2026, 18:54

260710-xkhqqshy2z8

Sharing

Copy URL Twitter E-mail

General

  • Target
    https://cdn.discordapp.com/attachments/1523714412148691084/1525213244929605744/CRACKED_Rebooted.lol.exe?ex=6a529106&is=6a513f86&hm=4686d3dfdddf6069d26d3e68b3a20fee89e39ed0bebed2d5df04c7beb8ca72a0&
  • Sample260710-xlltsae18n
Score
8/10
defense_evasiondiscoverypersistenceransomwarespywarestealer

Malware Config

Targets

    • Target
      https://cdn.discordapp.com/attachments/1523714412148691084/1525213244929605744/CRACKED_Rebooted.lol.exe?ex=6a529106&is=6a513f86&hm=4686d3dfdddf6069d26d3e68b3a20fee89e39ed0bebed2d5df04c7beb8ca72a0&
    Score
    8/10
    discoverypersistenceransomwarespywarestealerdefense_evasion

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks