Resubmissions

20/07/2024, 19:46

240720-yg4dpsweqd 8

20/07/2024, 19:44

240720-yfr92swenh 8

General

  • Target

    https://cdn.discordapp.com/attachments/1264009280479301633/1264306631269814355/clientblocker.rar?ex=669d64ce&is=669c134e&hm=78682c8898157fa19f9ff0e6ac79817f7babfb726dba972900b333b5c583c6a0&

  • Sample

    240720-yfr92swenh

Malware Config

Targets

    • Target

      https://cdn.discordapp.com/attachments/1264009280479301633/1264306631269814355/clientblocker.rar?ex=669d64ce&is=669c134e&hm=78682c8898157fa19f9ff0e6ac79817f7babfb726dba972900b333b5c583c6a0&

    • Drops file in Drivers directory

    • Modifies Windows Firewall

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks