General
- Target https://www.bing.com/ck/a?!&&p=e41e6063aac1a5355513566f045a8579010cbdbd6604f11347495e4fb680126fJmltdHM9MTc4NjQwNjQwMA&ptn=3&ver=2&hsh=4&fclid=3db25b11-31bd-69fc-20e1-4ca3305e6830&psq=sad+satan+exe&u=a1aHR0cHM6Ly9kcml2ZS5nb29nbGUuY29tL2ZpbGUvZC8wQjg0MFJvSmZhdXBkU25wVFZpMUJOekF0Y1ZFL3ZpZXc_dXNwPXNoYXJpbmc
- Sample260811-phemasyyet
Score
7/10
Malware Config
Targets
-
- Target https://www.bing.com/ck/a?!&&p=e41e6063aac1a5355513566f045a8579010cbdbd6604f11347495e4fb680126fJmltdHM9MTc4NjQwNjQwMA&ptn=3&ver=2&hsh=4&fclid=3db25b11-31bd-69fc-20e1-4ca3305e6830&psq=sad+satan+exe&u=a1aHR0cHM6Ly9kcml2ZS5nb29nbGUuY29tL2ZpbGUvZC8wQjg0MFJvSmZhdXBkU25wVFZpMUJOekF0Y1ZFL3ZpZXc_dXNwPXNoYXJpbmc
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.