General
- Target https://www.dropbox.com/scl/fi/e5e0nxlstau9616gks8ea/ModPack21.exe?rlkey=khqr7momn7cbh01mmuuw6ta4w&st=n3td5fjn&dl=1
- Sample260728-sn34mayfqb
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://www.dropbox.com/scl/fi/e5e0nxlstau9616gks8ea/ModPack21.exe?rlkey=khqr7momn7cbh01mmuuw6ta4w&st=n3td5fjn&dl=1
Resource
win11ltsc2024-20260709-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
https://www.dropbox.com/scl/fi/e5e0nxlstau9616gks8ea/ModPack21.exe?rlkey=khqr7momn7cbh01mmuuw6ta4w&st=n3td5fjn&dl=1
Resource
win10v2004-20260513-en
21 signatures
150 seconds
Malware Config
Targets
-
- Target https://www.dropbox.com/scl/fi/e5e0nxlstau9616gks8ea/ModPack21.exe?rlkey=khqr7momn7cbh01mmuuw6ta4w&st=n3td5fjn&dl=1
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1