General
- Target https://cdn.discordapp.com/attachments/1497413030583992410/1510089326908674199/Velora1.3.exe?ex=6a543c47&is=6a52eac7&hm=18e6dbd6f4476df0c02e68db3013f3aca9fcb9452de364b5fcb948e3d096f172&
- Sample260712-e29lnscy6l
Score
8/10
Malware Config
Targets
-
- Target https://cdn.discordapp.com/attachments/1497413030583992410/1510089326908674199/Velora1.3.exe?ex=6a543c47&is=6a52eac7&hm=18e6dbd6f4476df0c02e68db3013f3aca9fcb9452de364b5fcb948e3d096f172&
Score8/10Downloads MZ/PE file
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
ConfuserEx .NET packer
Detects ConfuserEx .NET packer.
Suspicious use of NtSetInformationThreadHideFromDebugger