General

  • Target

    https://cdn.discordapp.com/attachments/1276598886261063700/1279433103017906186/WareStore_1.1.5.exe?ex=66d5152e&is=66d3c3ae&hm=762c2e833770ee38d60f2d57cb94d42e31e9c05018aa3fbfaaf2e7728f110b3c&

  • Sample

    240901-ml5xjsybnr

Malware Config

Targets

    • Target

      https://cdn.discordapp.com/attachments/1276598886261063700/1279433103017906186/WareStore_1.1.5.exe?ex=66d5152e&is=66d3c3ae&hm=762c2e833770ee38d60f2d57cb94d42e31e9c05018aa3fbfaaf2e7728f110b3c&

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks