General
- Target https://cdn.discordapp.com/attachments/1511865529227284624/1531869769148661862/Xeno-v1.3.55.exe?ex=6a6ac865&is=6a6976e5&hm=a79fae7120439ef4c0b23e6c2bade2325e8b3c89e3cac31aba04f26bafcd7547&
- Sample260729-eebq5atdrd
Score
8/10
Malware Config
Targets
-
- Target https://cdn.discordapp.com/attachments/1511865529227284624/1531869769148661862/Xeno-v1.3.55.exe?ex=6a6ac865&is=6a6976e5&hm=a79fae7120439ef4c0b23e6c2bade2325e8b3c89e3cac31aba04f26bafcd7547&
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.