General
- Target https://cdn.discordapp.com/attachments/1526935053253345373/1526957932166512691/4ae5330c-daad-4bf9-b87d-d8c44fcafb0c.zip?ex=6a58e9e4&is=6a579864&hm=947a86a7e1d7e7e19cc2d891b6f43d7a623295a548a5199fff9222b7163ba8ef&
- Sample260715-sg43caas5t
Score
7/10
Malware Config
Targets
-
- Target https://cdn.discordapp.com/attachments/1526935053253345373/1526957932166512691/4ae5330c-daad-4bf9-b87d-d8c44fcafb0c.zip?ex=6a58e9e4&is=6a579864&hm=947a86a7e1d7e7e19cc2d891b6f43d7a623295a548a5199fff9222b7163ba8ef&
Score7/10-
A potential corporate email address has been identified in the URL: [email protected]
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Probable phishing domain