raw.githubusercontent.com

Phishing C&C Download

Attackers can phish users with a raw.githubusercontent.com link that downloads malware.

Malware was seen using raw.githubusercontent.com to host malicious C&C commands which the malware will periodically fetch.

None

Malware can fetch additional tools from raw.githubusercontent.com.

https://www.joesandbox.com/analysis/517120/0/html