[color=#FF00]Link (Dangerous): MSI Dragon Center Download Center (landing-dragon-centr.com) [/color]
Registered in the Netherlands via Gransy, S.R.O. on February 28, 2023 - Whois landing-dragon-centr.com
Associated Facebook Account - Clara | Facebook
Popup is a fake MSI Dragon Center download page, with the program being downloaded from Discord as a .rar file.
[color=#FF0000]VirusTotal - VirusTotal - File - 3b22742d10f7d8c4eced2ec8eba34057939c39b187e3243da612d483e150268c[/color]
[color=#FF0000]Any.Run - Analysis Dragon-center.rar (MD5: 16D0D3B6C91EE6B485F0291B3AA3682E) Malicious activity - Interactive analysis ANY.RUN[/color]
Program contains the Artemis, Hulk, Kryptik, MISLHeracles and Wacatac trojans alongside a variant of the Redline stealer.
Associated IP Addresses:
185.117.90.53
77.73.134.40
