Resubmissions

15/06/2023, 15:48

230615-s8texsac6w 8

15/06/2023, 15:43

230615-s5817sac6s 8

General

  • Target

    https://github.com/MC-Terminal/minecraft-terminal/releases/download/6.0.2/mc-term-win.exe

  • Sample

    230615-s8texsac6w

Score
8/10

Malware Config

Targets

    • Target

      https://github.com/MC-Terminal/minecraft-terminal/releases/download/6.0.2/mc-term-win.exe

    Score
    8/10
    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v6

Tasks