General

  • Target

    https://financemastersacademy.com/inc/2.exe

  • Sample

    240901-w7zgbsycqm

Malware Config

Targets

    • Target

      https://financemastersacademy.com/inc/2.exe

    • Detects ZharkBot payload

      ZharkBot is a botnet written C++.

    • ZharkBot

      ZharkBot is a botnet written C++.

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks