General
- Target https://cdn.discordapp.com/attachments/1548229741897719848/1553170857051029514/MrmCoreR.cpl?ex=6ab84694&is=6ab6f514&hm=9eeb2b6a9777b48bff2cd43646c44601e650f1f9ad814ba2bac096d37897c836&
- Sample260925-2cvsjs1tdy
Score
8/10
Malware Config
Targets
-
- Target https://cdn.discordapp.com/attachments/1548229741897719848/1553170857051029514/MrmCoreR.cpl?ex=6ab84694&is=6ab6f514&hm=9eeb2b6a9777b48bff2cd43646c44601e650f1f9ad814ba2bac096d37897c836&
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Downloads MZ/PE file
-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.