General
- Target https://cdn.discordapp.com/attachments/1562940129159544863/1563962738793914588/Loader.zip?ex=6ae620cd&is=6ae4cf4d&hm=158daf3885ff99108e5b975ea2367d289d798c71c5dfb4db478bfb1df2d07082&
- Sample261030-ylvmcsfd97
Score
7/10
Malware Config
Targets
-
- Target https://cdn.discordapp.com/attachments/1562940129159544863/1563962738793914588/Loader.zip?ex=6ae620cd&is=6ae4cf4d&hm=158daf3885ff99108e5b975ea2367d289d798c71c5dfb4db478bfb1df2d07082&
Score7/10-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of NtSetInformationThreadHideFromDebugger