hxxps://mediabluesky[.]com/uploaded_docs/Invoice_72947[.]pdf

General

Target

https://mediabluesky.com/uploaded_docs/Invoice_72947.pdf

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

Processes:

chrome.exe

description	ioc	process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

Processes:

chrome.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133608124926999588"	chrome.exe

Modifies registry class 1 IoCs

Processes:

chrome.exe

description ioc process

Key created \REGISTRY\USER\S-1-5-21-3001105534-2705918504-2956618779-1000_Classes\Local Settings chrome.exe
Suspicious behavior: EnumeratesProcesses 4 IoCs

Processes:

chrome.exechrome.exe

pid process

8 chrome.exe
8 chrome.exe
4656 chrome.exe
4656 chrome.exe
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

Processes:

chrome.exe

pid process

8 chrome.exe
8 chrome.exe
8 chrome.exe
8 chrome.exe
8 chrome.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-21-3001105534-2705918504-2956618779-1000_Classes\Local Settings	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

Processes:

chrome.exe

description	pid	process
Token: SeShutdownPrivilege	8	chrome.exe
Token: SeCreatePagefilePrivilege	8	chrome.exe
Token: SeShutdownPrivilege	8	chrome.exe
Token: SeCreatePagefilePrivilege	8	chrome.exe
Token: SeShutdownPrivilege	8	chrome.exe
Token: SeCreatePagefilePrivilege	8	chrome.exe
Token: SeShutdownPrivilege	8	chrome.exe
Token: SeCreatePagefilePrivilege	8	chrome.exe
Token: SeShutdownPrivilege	8	chrome.exe
Token: SeCreatePagefilePrivilege	8	chrome.exe
Token: SeShutdownPrivilege	8	chrome.exe
Token: SeCreatePagefilePrivilege	8	chrome.exe
Token: SeShutdownPrivilege	8	chrome.exe
Token: SeCreatePagefilePrivilege	8	chrome.exe
Token: SeShutdownPrivilege	8	chrome.exe
Token: SeCreatePagefilePrivilege	8	chrome.exe
Token: SeShutdownPrivilege	8	chrome.exe
Token: SeCreatePagefilePrivilege	8	chrome.exe
Token: SeShutdownPrivilege	8	chrome.exe
Token: SeCreatePagefilePrivilege	8	chrome.exe
Token: SeShutdownPrivilege	8	chrome.exe
Token: SeCreatePagefilePrivilege	8	chrome.exe
Token: SeShutdownPrivilege	8	chrome.exe
Token: SeCreatePagefilePrivilege	8	chrome.exe
Token: SeShutdownPrivilege	8	chrome.exe
Token: SeCreatePagefilePrivilege	8	chrome.exe
Token: SeShutdownPrivilege	8	chrome.exe
Token: SeCreatePagefilePrivilege	8	chrome.exe
Token: SeShutdownPrivilege	8	chrome.exe
Token: SeCreatePagefilePrivilege	8	chrome.exe
Token: SeShutdownPrivilege	8	chrome.exe
Token: SeCreatePagefilePrivilege	8	chrome.exe
Token: SeShutdownPrivilege	8	chrome.exe
Token: SeCreatePagefilePrivilege	8	chrome.exe
Token: SeShutdownPrivilege	8	chrome.exe
Token: SeCreatePagefilePrivilege	8	chrome.exe
Token: SeShutdownPrivilege	8	chrome.exe
Token: SeCreatePagefilePrivilege	8	chrome.exe
Token: SeShutdownPrivilege	8	chrome.exe
Token: SeCreatePagefilePrivilege	8	chrome.exe
Token: SeShutdownPrivilege	8	chrome.exe
Token: SeCreatePagefilePrivilege	8	chrome.exe
Token: SeShutdownPrivilege	8	chrome.exe
Token: SeCreatePagefilePrivilege	8	chrome.exe
Token: SeShutdownPrivilege	8	chrome.exe
Token: SeCreatePagefilePrivilege	8	chrome.exe
Token: SeShutdownPrivilege	8	chrome.exe
Token: SeCreatePagefilePrivilege	8	chrome.exe
Token: SeShutdownPrivilege	8	chrome.exe
Token: SeCreatePagefilePrivilege	8	chrome.exe
Token: SeShutdownPrivilege	8	chrome.exe
Token: SeCreatePagefilePrivilege	8	chrome.exe
Token: SeShutdownPrivilege	8	chrome.exe
Token: SeCreatePagefilePrivilege	8	chrome.exe
Token: SeShutdownPrivilege	8	chrome.exe
Token: SeCreatePagefilePrivilege	8	chrome.exe
Token: SeShutdownPrivilege	8	chrome.exe
Token: SeCreatePagefilePrivilege	8	chrome.exe
Token: SeShutdownPrivilege	8	chrome.exe
Token: SeCreatePagefilePrivilege	8	chrome.exe
Token: SeShutdownPrivilege	8	chrome.exe
Token: SeCreatePagefilePrivilege	8	chrome.exe
Token: SeShutdownPrivilege	8	chrome.exe
Token: SeCreatePagefilePrivilege	8	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

Processes:

chrome.exe

pid	process
8	chrome.exe
8	chrome.exe
8	chrome.exe
8	chrome.exe
8	chrome.exe
8	chrome.exe
8	chrome.exe
8	chrome.exe
8	chrome.exe
8	chrome.exe
8	chrome.exe
8	chrome.exe
8	chrome.exe
8	chrome.exe
8	chrome.exe
8	chrome.exe
8	chrome.exe
8	chrome.exe
8	chrome.exe
8	chrome.exe
8	chrome.exe
8	chrome.exe
8	chrome.exe
8	chrome.exe
8	chrome.exe
8	chrome.exe

Suspicious use of SendNotifyMessage 12 IoCs

Processes:

chrome.exe

pid process

8 chrome.exe
8 chrome.exe
8 chrome.exe
8 chrome.exe
8 chrome.exe
8 chrome.exe
8 chrome.exe
8 chrome.exe
8 chrome.exe
8 chrome.exe
8 chrome.exe
8 chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

chrome.exe

description	pid	process	target process
PID 8 wrote to memory of 240	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 240	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2064	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2064	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2064	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2064	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2064	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2064	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2064	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2064	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2064	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2064	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2064	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2064	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2064	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2064	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2064	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2064	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2064	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2064	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2064	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2064	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2064	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2064	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2064	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2064	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2064	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2064	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2064	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2064	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2064	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2064	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2064	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 1948	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 1948	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2508	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2508	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2508	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2508	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2508	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2508	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2508	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2508	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2508	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2508	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2508	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2508	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2508	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2508	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2508	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2508	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2508	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2508	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2508	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2508	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2508	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2508	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2508	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2508	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2508	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2508	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2508	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2508	8	chrome.exe	chrome.exe
PID 8 wrote to memory of 2508	8	chrome.exe	chrome.exe

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://mediabluesky.com/uploaded_docs/Invoice_72947.pdf
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:8

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffd3ed6ab58,0x7ffd3ed6ab68,0x7ffd3ed6ab78
2⤵
PID:240

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1732 --field-trial-handle=1796,i,12400165626624491716,4750902828315967098,131072 /prefetch:2
2⤵
PID:2064

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2092 --field-trial-handle=1796,i,12400165626624491716,4750902828315967098,131072 /prefetch:8
2⤵
PID:1948

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2132 --field-trial-handle=1796,i,12400165626624491716,4750902828315967098,131072 /prefetch:8
2⤵
PID:2508

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2924 --field-trial-handle=1796,i,12400165626624491716,4750902828315967098,131072 /prefetch:1
2⤵
PID:2336

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2932 --field-trial-handle=1796,i,12400165626624491716,4750902828315967098,131072 /prefetch:1
2⤵
PID:1420

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4092 --field-trial-handle=1796,i,12400165626624491716,4750902828315967098,131072 /prefetch:1
2⤵
PID:2644

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4408 --field-trial-handle=1796,i,12400165626624491716,4750902828315967098,131072 /prefetch:8
2⤵
PID:4860

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4588 --field-trial-handle=1796,i,12400165626624491716,4750902828315967098,131072 /prefetch:8
2⤵
PID:1528

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4268 --field-trial-handle=1796,i,12400165626624491716,4750902828315967098,131072 /prefetch:8
2⤵
PID:3464

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=1684 --field-trial-handle=1796,i,12400165626624491716,4750902828315967098,131072 /prefetch:1
2⤵
PID:1732

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4204 --field-trial-handle=1796,i,12400165626624491716,4750902828315967098,131072 /prefetch:2
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:4656

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=4240 --field-trial-handle=1796,i,12400165626624491716,4750902828315967098,131072 /prefetch:1
2⤵
PID:2744

C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"
1⤵
PID:1128

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1

T1012

System Information Discovery

1

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
f5ae0554f9042bd65881c2873d7f4d33

SHA1
6ccedc1181e1e5ff9f79a9b8ad37cebf483dc7ff

SHA256
9e0e88b4ef29348c624da15eae0c30da877dc26f862d266549e21938f880cf38

SHA512
fd66f1fbd8aaaddcc676d469699efefc06890a2f21cb5339d177b951edc7b4b3a2cd7e36c2caf1c8dc459e657d34e98f45bb54fb6e66a6bc73bf31a8e220a379

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
ffba7a72d24c9d1a10f997e534c3043b

SHA1
66c0ac77d458137352bbaaef619902aef4f99cc0

SHA256
6f90dee8a58daffe234527b87a51b450ba138c87c9aa5963e346b30be3045f95

SHA512
61bb5a32ccb555b0c370d61c6b4e35ba83a5cee3c26cd71c510728abbc55cfbe583e5ee5e477981707b240a5d0ac1ae4d80cb2dfe118eac555e35c7652c6d4d7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
129KB

MD5
83e2d99096ed4c8bdd27ed4f64130e1f

SHA1
5341d32e652917d8a7ff23a0effa2087ca92a217

SHA256
3e96e7886184daefb0c801e7f92c7c57b4074e47a17c1f33402c76a9a95efaf3

SHA512
85781ec57124a2716df9d10996e88b64f4ddef371cd9be953d17d088978cf2906f2eb0096c79612c2a707dae2dc828d98d878d25a1cc42c992316db40c928906

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

Filesize
97KB

MD5
1e8bdbc99483a58f0b9ddeec02256c13

SHA1
53bfa3ee33a73b7eb59bbba68a3d92afd2377406

SHA256
f6e006025ccacfb59bd785ef31533e0aaa0ae36caab69ea6e1cf28f89585d6e4

SHA512
52b56548c289cefa87debc17fe92263cfc4dbd7521a3b25b42388a0c0bc5673680677016775139ad808351b35b89fa07748544e0b56f1970c8650e266f4c5336

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe584f44.TMP

Filesize
83KB

MD5
471f2b3a0ba6ca4f6e2b854da5112f32

SHA1
1050119bb1823c94bfbe80241f8cc76f79179683

SHA256
4961b3ef45eed80f51defbafc095e1f1c15fe37953ad35cc47af1ec2b84251d4

SHA512
0ca41fb6307e9b6570ad911814e7c0f5c93b0ed98486dc15c0eb064a5214e59172f2d980037846d213e4a0da1f582f946a9f6ccec6d94226c1acd42199d25cb7

Download Submit
\??\pipe\crashpad_8_GQJZFHXLHWOLLOCL

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads