hxxps://oldnavy[.]barclaysuus[.]com/

General

Target

https://oldnavy.barclaysuus.com/

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

Processes:

chrome.exe

description	ioc	process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

Processes:

chrome.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133522340151452831"	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

Processes:

chrome.exechrome.exe

pid process

2272 chrome.exe
2272 chrome.exe
2456 chrome.exe
2456 chrome.exe
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

Processes:

chrome.exe

pid process

2272 chrome.exe
2272 chrome.exe
2272 chrome.exe
2272 chrome.exe
2272 chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

Processes:

chrome.exe

description	pid	process
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe
Token: SeShutdownPrivilege	2272	chrome.exe
Token: SeCreatePagefilePrivilege	2272	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

Processes:

chrome.exe

pid	process
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

Processes:

chrome.exe

pid	process
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe
2272	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

chrome.exe

description	pid	process	target process
PID 2272 wrote to memory of 1500	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 1500	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 3004	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 3004	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 3004	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 3004	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 3004	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 3004	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 3004	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 3004	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 3004	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 3004	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 3004	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 3004	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 3004	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 3004	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 3004	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 3004	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 3004	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 3004	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 3004	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 3004	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 3004	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 3004	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 3004	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 3004	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 3004	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 3004	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 3004	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 3004	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 3004	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 3004	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 3004	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 3004	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 3004	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 3004	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 3004	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 3004	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 3004	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 3004	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 4604	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 4604	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 4072	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 4072	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 4072	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 4072	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 4072	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 4072	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 4072	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 4072	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 4072	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 4072	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 4072	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 4072	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 4072	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 4072	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 4072	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 4072	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 4072	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 4072	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 4072	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 4072	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 4072	2272	chrome.exe	chrome.exe
PID 2272 wrote to memory of 4072	2272	chrome.exe	chrome.exe

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://oldnavy.barclaysuus.com/
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2272

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffbf54f9758,0x7ffbf54f9768,0x7ffbf54f9778
2⤵
PID:1500

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1732 --field-trial-handle=1804,i,9449036732705062915,11399888434586096677,131072 /prefetch:2
2⤵
PID:3004

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2032 --field-trial-handle=1804,i,9449036732705062915,11399888434586096677,131072 /prefetch:8
2⤵
PID:4604

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2220 --field-trial-handle=1804,i,9449036732705062915,11399888434586096677,131072 /prefetch:8
2⤵
PID:4072

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2836 --field-trial-handle=1804,i,9449036732705062915,11399888434586096677,131072 /prefetch:1
2⤵
PID:3592

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2844 --field-trial-handle=1804,i,9449036732705062915,11399888434586096677,131072 /prefetch:1
2⤵
PID:4236

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4760 --field-trial-handle=1804,i,9449036732705062915,11399888434586096677,131072 /prefetch:1
2⤵
PID:2872

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=3396 --field-trial-handle=1804,i,9449036732705062915,11399888434586096677,131072 /prefetch:1
2⤵
PID:2144

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=4992 --field-trial-handle=1804,i,9449036732705062915,11399888434586096677,131072 /prefetch:1
2⤵
PID:484

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5212 --field-trial-handle=1804,i,9449036732705062915,11399888434586096677,131072 /prefetch:8
2⤵
PID:632

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5324 --field-trial-handle=1804,i,9449036732705062915,11399888434586096677,131072 /prefetch:8
2⤵
PID:4880

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5456 --field-trial-handle=1804,i,9449036732705062915,11399888434586096677,131072 /prefetch:2
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:2456

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:3148

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1

T1012

System Information Discovery

1

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000009

Filesize
194KB

MD5
36104d04a9994182ba78be74c7ac3b0e

SHA1
0c049d44cd22468abb1d0711ec844e68297a7b3d

SHA256
ccde155056cdce86d7e51dfd4e8fb603e8d816224b1257adfcf9503139dd28f1

SHA512
8c115e3e5925fb01efd8dda889f4d5e890f6daaf40b10d5b8e3d9b19e15dadcb9dcf344f40c43f59a1f5428b3ee49e24e492cf0cb6826add1c03d21efdec52ba

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
192B

MD5
4e794522b4e70f7f404b042b6f8857df

SHA1
4a75887eea074911c31471818a13a5eba6fb6cb6

SHA256
65033d15dc33364e49eb70be6c6158533e66b1aa5b4b57191ec05de5093dda54

SHA512
7c846c0e3154b67624273d486e06b5fda0609ff42ea6ef94ab28dabf9f5fe0a23004f07d0a9cb696fd0dc9790f0c54cee74102c8f5d91c1b1e3d6dc3a5441576

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
b757c641bdebe3614c0356b2ac9fa8dd

SHA1
7dae2304d2626088fa8419d059186856f1062011

SHA256
56f578669b86617752c86917d95d6ea9c81a20d90bb3e839d99f900705d3428f

SHA512
cfbf8e1bb8b80c4e2e35caf1af33e0ee7ec5bc46050860f521384f9a0fc9acd334537970fa623e6bfc695d2da89aff3bdb4928a6bea4796a170ecba68ed998f6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
0611d7d7b3909f9204ef9fd098087688

SHA1
e873531efe87d1cc94e625cd52672e768040fbf5

SHA256
f4a88a7dc8198bd0cee77400db8821b22634c4fd45a7f602720f83057cca97b9

SHA512
8546a451d4fd244db7f7e688ef901dd63d25d783c4b8a05b34fca1610947f7a183346b41c31f5e156b577aca571fd81ba7464fa9a6656e6b406ef57caec37895

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
114KB

MD5
8a8e6cd589114cc3395b20638c548362

SHA1
4fbee46ff1c306f361e29b6a6c894ea306966829

SHA256
84d8ea74456085322546da5204c13f4c50575e547ad10d092e124eeb6cd4d4f4

SHA512
3c066d7883a689c8df140f848d83a1d1f84aadff5990f1995fb763b2e63288e41123a607f2e383138740ddb918e9059a3a04d78b5c4b45ac69bd4d287668bf85

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
\??\pipe\crashpad_2272_NAAIPZEFJTHLVJVO

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads