General
- Target https://cdn.discordapp.com/attachments/1525239778566602842/1526350609383428168/ViridianFree-Setup-0.1.0.exe?ex=6a8ebc07&is=6a8d6a87&hm=f040b270a8206234008c8bf4ea633fa41f09310b9c10d304d2d105967d55abb2&
- Sample260825-14gvbseq8z
Score
8/10
Malware Config
Targets
-
- Target https://cdn.discordapp.com/attachments/1525239778566602842/1526350609383428168/ViridianFree-Setup-0.1.0.exe?ex=6a8ebc07&is=6a8d6a87&hm=f040b270a8206234008c8bf4ea633fa41f09310b9c10d304d2d105967d55abb2&
Score8/10-
Downloads MZ/PE file
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.