General
- Target https://cdn.discordapp.com/attachments/1529268420171006004/1551694954223374457/nevermiss.exe?ex=6ac0bfca&is=6abf6e4a&hm=ff2ba1961a5b53424936dc12524d51c171f563dabd68572e45ccbc78409fcd56&
- Sample261002-qew8lstgmd
Score
8/10
Malware Config
Targets
-
- Target https://cdn.discordapp.com/attachments/1529268420171006004/1551694954223374457/nevermiss.exe?ex=6ac0bfca&is=6abf6e4a&hm=ff2ba1961a5b53424936dc12524d51c171f563dabd68572e45ccbc78409fcd56&
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies system executable filetype association
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Probable phishing domain