General
- Target https://cdn.discordapp.com/attachments/1381036015489122324/1527887907195584723/CardusCraft-CurseForge_.zip?ex=6a5c4bff&is=6a5afa7f&hm=a336bf9f397bd8742f169336b2606756302a9d9429448acbc6245a3c2edff960&
- Sample260718-exycvaf19r
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://cdn.discordapp.com/attachments/1381036015489122324/1527887907195584723/CardusCraft-CurseForge_.zip?ex=6a5c4bff&is=6a5afa7f&hm=a336bf9f397bd8742f169336b2606756302a9d9429448acbc6245a3c2edff960&
Resource
win11-20260513-en
Behavioral task
behavioral2
Sample
https://cdn.discordapp.com/attachments/1381036015489122324/1527887907195584723/CardusCraft-CurseForge_.zip?ex=6a5c4bff&is=6a5afa7f&hm=a336bf9f397bd8742f169336b2606756302a9d9429448acbc6245a3c2edff960&
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target https://cdn.discordapp.com/attachments/1381036015489122324/1527887907195584723/CardusCraft-CurseForge_.zip?ex=6a5c4bff&is=6a5afa7f&hm=a336bf9f397bd8742f169336b2606756302a9d9429448acbc6245a3c2edff960&
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.