Resubmissions
25-08-2024 14:56
240825-sa76es1hln 10General
-
Target
https://github.com/AJMartel/MeGa-RAT-Pack/raw/master/Eagle%20RAT%20v2.5.zip
-
Sample
240825-sa76es1hln
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://github.com/AJMartel/MeGa-RAT-Pack/raw/master/Eagle%20RAT%20v2.5.zip
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
https://github.com/AJMartel/MeGa-RAT-Pack/raw/master/Eagle%20RAT%20v2.5.zip
-
XMRig Miner payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Indicator Removal: Clear Persistence
Clear artifacts associated with previously established persistence like scheduletasks on a host.
-
Legitimate hosting services abused for malware hosting/C2
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Scheduled Task/Job
1Scheduled Task
1Defense Evasion
Impair Defenses
1Disable or Modify System Firewall
1Indicator Removal
1Clear Persistence
1