General

  • Target

    https://www.te.com/usa-en/products/antennas/intersection/antenna-accessories.html?te_bu=Dat&te_type=social&te_campaign=ggl_glo_dnd-ggl-global-social-fy22-extlan-accessory-ph_sma-2387_3&elqCampaignId=124306&gad_source=1&gclid=EAIaIQobChMI7PG0mJWXhQMVkExHAR2pcwpvEAAYAyAAEgK93fD_BwE&tab=pgp-story

  • Sample

    240328-rtrgcagd9z

Malware Config

Targets

    • Target

      https://www.te.com/usa-en/products/antennas/intersection/antenna-accessories.html?te_bu=Dat&te_type=social&te_campaign=ggl_glo_dnd-ggl-global-social-fy22-extlan-accessory-ph_sma-2387_3&elqCampaignId=124306&gad_source=1&gclid=EAIaIQobChMI7PG0mJWXhQMVkExHAR2pcwpvEAAYAyAAEgK93fD_BwE&tab=pgp-story

    • Changes its process name

    • Reads user data of web browsers

      Reads stored browser data which can include saved credentials.

    • Checks CPU configuration

      Checks CPU information which indicate if the system is a virtual machine.

    • Reads CPU attributes

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Virtualization/Sandbox Evasion

1
T1497

Discovery

Virtualization/Sandbox Evasion

1
T1497

System Information Discovery

2
T1082

Tasks