General

  • Target

    https://gofile.io/d/AK6nLb

  • Sample

    241107-zt2w3sydmm

Malware Config

Targets

    • Target

      https://gofile.io/d/AK6nLb

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

    • Indicator Removal: Clear Persistence

      Clear artifacts associated with previously established persistence like scheduletasks on a host.

MITRE ATT&CK Enterprise v15

Tasks