ReversingLabs @reversinglabs.com · Jul 11

Exploring the blockchain data for the given contract address reveals the URL redirect hidden in contract data published to blockchain.

0 likes 1 replies

?

Replies

ReversingLabs · Jul 11

Redirect location hosts another downloader instruction, which downloads MSI installer that contains logic for downloading further stages of this malicious campaign.