Resubmissions

07/01/2025, 02:15

250107-cptnks1pap8

12/08/2024, 18:44

240812-xdfb2aydlb8

12/08/2024, 14:42

240812-r3eh5szekf8

12/08/2024, 14:20

240812-rnv8cavcql8

12/08/2024, 14:14

240812-rjzd7syeqe8

General

  • Target
    https://github.com/RattlesHyper/TrafficerMC/releases/download/v3.1/TrafficerMC-3.1-windows-x64.exe
  • Sample240812-xdfb2aydlb

Malware Config

Targets

    • Target
      https://github.com/RattlesHyper/TrafficerMC/releases/download/v3.1/TrafficerMC-3.1-windows-x64.exe
    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Legitimate hosting services abused for malware hosting/C2

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks