General
- Target https://www.mediafire.com/file/nq1nd1tkde6k8dw/SwiftUploads_%E2%80%94_Download_%E2%80%94_D4F1FE005B7C94_Archive_latest_4931.zip/file
- Sample260724-nv861ayfqc
Score
7/10
Malware Config
Targets
-
- Target https://www.mediafire.com/file/nq1nd1tkde6k8dw/SwiftUploads_%E2%80%94_Download_%E2%80%94_D4F1FE005B7C94_Archive_latest_4931.zip/file
Score7/10-
Executes dropped EXE
-
Indirect Command Execution
Adversaries may abuse utilities that allow for command execution to bypass security restrictions that limit the use of command-line interpreters.
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1