General

  • Target

    http://valhalla.nextron-systems.com

  • Sample

    230329-e24qesgd3v

Malware Config

Targets

    • Target

      http://valhalla.nextron-systems.com

    • Cobalt Strike reflective loader

      Detects the reflective loader used by Cobalt Strike.

    • Cobaltstrike

      Detected malicious payload which is part of Cobaltstrike.

    • Industroyer

      Also known as CrashOverride. Malware framework which targets Industrial Control Systems (ICS) related to power transmission.

    • Industroyer IEC-104 Module

      Contains strings related to Industroyer module used to communicate with power transmission grids over IEC-104 protocol.

MITRE ATT&CK Enterprise v6

Tasks