Resubmissions

11/07/2026, 11:44

260711-nv5htahv4r

11/07/2026, 11:30

260711-nmdecsbs5t8

General

  • Target
    https://cdn.discordapp.com/attachments/1525336420850466846/1525336453213851781/KedycikSmp-CurseForge.zip?ex=6a5303c5&is=6a51b245&hm=1953d9307b2939d6c730fe1674476b6e2d1d52af945dec7a3c468acdda0cf64f
  • Sample260711-nmdecsbs5t

Malware Config

Targets

    • Target
      https://cdn.discordapp.com/attachments/1525336420850466846/1525336453213851781/KedycikSmp-CurseForge.zip?ex=6a5303c5&is=6a51b245&hm=1953d9307b2939d6c730fe1674476b6e2d1d52af945dec7a3c468acdda0cf64f
    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

MITRE ATT&CK Enterprise v16

Tasks