General

  • Target

    http://192.3.31.220/Advfgmw.exe

  • Sample

    200710-4efaa24286

Score
8/10

Malware Config

Targets

    • Target

      http://192.3.31.220/Advfgmw.exe

    Score
    8/10
    • Executes dropped EXE

    • Adds Run entry to start application

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v6

Tasks