General
Static task
static1
URLScan task
urlscan1
Malware Config
Targets
-
- Target https://drive.google.com/file/d/1xvyKiLgTht0b0BOBEHW7SHAYZHLpH9II/view
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1