General

  • Target
    http://644e1b39becc0de04f31c5eb6e186063921c230c280c7d5db474eec98d19c51b
  • Sample260827-3qq7ys1grf

Malware Config

Targets

    • Target
      http://644e1b39becc0de04f31c5eb6e186063921c230c280c7d5db474eec98d19c51b
    • Downloads MZ/PE file

    • Executes dropped EXE

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

MITRE ATT&CK Enterprise v16

Tasks