General
- Target https://cdn.discordapp.com/attachments/1483058203054051398/1542207238087901326/Maxeys_Visuals_version-17d504d2c9544583.zip?ex=6a91b56a&is=6a9063ea&hm=d6db2526d764596b6272253a366581e2bfa1c1f4b2c82b238986f52d9ba58410&
- Sample260828-bexrtasckb
Score
8/10
Malware Config
Targets
-
- Target https://cdn.discordapp.com/attachments/1483058203054051398/1542207238087901326/Maxeys_Visuals_version-17d504d2c9544583.zip?ex=6a91b56a&is=6a9063ea&hm=d6db2526d764596b6272253a366581e2bfa1c1f4b2c82b238986f52d9ba58410&
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled
-
Probable phishing domain
-
Suspicious use of NtSetInformationThreadHideFromDebugger