General
- Target https://www.dropbox.com/scl/fi/a58uw5ovzkqhvbp7vziu1/ModPack21.exe?rlkey=tr50s7leudcvxoq83xn3jxzlr&st=wuznea5h&dl=1
- Sample260718-e9sm5agw2q
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://www.dropbox.com/scl/fi/a58uw5ovzkqhvbp7vziu1/ModPack21.exe?rlkey=tr50s7leudcvxoq83xn3jxzlr&st=wuznea5h&dl=1
Resource
win10v2004-20260513-en
21 signatures
900 seconds
Malware Config
Targets
-
- Target https://www.dropbox.com/scl/fi/a58uw5ovzkqhvbp7vziu1/ModPack21.exe?rlkey=tr50s7leudcvxoq83xn3jxzlr&st=wuznea5h&dl=1
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1