General
- Target http://cdn.discordapp.com/attachments/1534835506511089744/1534841211855175780/Wave_deploy_pacchetto.zip?ex=6a7597c4&is=6a744644&hm=60ab67bac1aa91ccc443de084ae905cdf6e9e80e8940d5fe107a5761915b4231&
- Sample260806-lfchdagr5v
Score
7/10
Malware Config
Targets
-
- Target http://cdn.discordapp.com/attachments/1534835506511089744/1534841211855175780/Wave_deploy_pacchetto.zip?ex=6a7597c4&is=6a744644&hm=60ab67bac1aa91ccc443de084ae905cdf6e9e80e8940d5fe107a5761915b4231&
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Network Share Discovery
Attempt to gather information on host network.
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.
-
Suspicious use of NtSetInformationThreadHideFromDebugger