General

  • Target

    http://176.10.80.38:8843/11.msi

  • Sample

    230602-wfhdqsdb6w

Score
8/10

Malware Config

Targets

    • Target

      http://176.10.80.38:8843/11.msi

    Score
    8/10
    • Blocklisted process makes network request

    • Unknown use of msiexec with remote resource

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v6

Tasks