General
- Target https://cdn.discordapp.com/attachments/1529502057055256747/1531991277556596827/RobloxStudioModManager_2.exe?ex=6a6b398f&is=6a69e80f&hm=30f24fdd25313f566e4248bb5733c601be5bef090e1b526e310443d23d30edd8&
- Sample260729-nyefsstaka
Score
8/10
Malware Config
Targets
-
- Target https://cdn.discordapp.com/attachments/1529502057055256747/1531991277556596827/RobloxStudioModManager_2.exe?ex=6a6b398f&is=6a69e80f&hm=30f24fdd25313f566e4248bb5733c601be5bef090e1b526e310443d23d30edd8&
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.