General

  • Target
    https://cdn.discordapp.com/attachments/1469733424745939067/1528765269193920734/mapspoof.com?ex=6a5f7d1b&is=6a5e2b9b&hm=931578b1ce4717e2077844fc437408fa81268334b31b9ae48c7b0c76d45c0fc0&
  • Sample260720-rfdy4aew2v
Score
8/10

Malware Config

Targets

    • Target
      https://cdn.discordapp.com/attachments/1469733424745939067/1528765269193920734/mapspoof.com?ex=6a5f7d1b&is=6a5e2b9b&hm=931578b1ce4717e2077844fc437408fa81268334b31b9ae48c7b0c76d45c0fc0&
    Score
    8/10
    • Downloads MZ/PE file

    • Executes dropped EXE

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v16

Tasks