General

  • Target
    https://cdn.discordapp.com/attachments/1531567430927646830/1537267520128552980/images.png?ex=6a7e6b71&is=6a7d19f1&hm=4baa81d4735e43947c443b1da21b75fe0285b68eeea7ec098538a0dc7e72294f&
  • Sample260813-bl69tsyflb
Score
6/10

Malware Config

Targets

    • Target
      https://cdn.discordapp.com/attachments/1531567430927646830/1537267520128552980/images.png?ex=6a7e6b71&is=6a7d19f1&hm=4baa81d4735e43947c443b1da21b75fe0285b68eeea7ec098538a0dc7e72294f&
    Score
    6/10
    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v16

Tasks