mydoom | c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb

General

Target

c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
Size

23KB
MD5

c35529caf5fa4afd3eda1751dc343d2c
SHA1

a1846e9d351cb2dbb6be39bbb99cc581a2aea2a3
SHA256

c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb
SHA512

53f2877d781d3a103c6e43d0cf34a0dc000d027f59d8f41a2fad2345ecfd12fd3c01d4cc29f30878041e37f927929712d2df6f368a860fa7d2bba3a354a95f3b
SSDEEP

384:FZcpzCIqdG3A3WUkx38GZDJuJbf1+o44u8gHzU0Zm91m9d:SCIqdH/k1ZVcT194jp400Yd

Score

10^/10

mydoom discovery persistence upx worm

Malware Config

Signatures

Detects MyDoom family 9 IoCs

Processes:

resource	yara_rule
behavioral2/memory/4488-3-0x0000000000800000-0x000000000080D000-memory.dmp	family_mydoom
behavioral2/memory/4488-5-0x0000000000800000-0x000000000080D000-memory.dmp	family_mydoom
behavioral2/memory/4488-61-0x0000000000800000-0x000000000080D000-memory.dmp	family_mydoom
behavioral2/memory/4488-132-0x0000000000800000-0x000000000080D000-memory.dmp	family_mydoom
behavioral2/memory/4488-133-0x0000000000800000-0x000000000080D000-memory.dmp	family_mydoom
behavioral2/memory/4488-196-0x0000000000800000-0x000000000080D000-memory.dmp	family_mydoom
behavioral2/memory/4488-270-0x0000000000800000-0x000000000080D000-memory.dmp	family_mydoom
behavioral2/memory/4488-297-0x0000000000800000-0x000000000080D000-memory.dmp	family_mydoom
behavioral2/memory/4488-298-0x0000000000800000-0x000000000080D000-memory.dmp	family_mydoom

MyDoom
MyDoom is a Worm that is written in C++.
worm mydoom
Mydoom family
mydoom

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

Processes:

c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe

description	ioc	process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\Traybar = "C:\\Windows\\lsass.exe"	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe

UPX packed file 11 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

Processes:

resource	yara_rule
behavioral2/memory/4488-0-0x0000000000800000-0x000000000080D000-memory.dmp	upx
behavioral2/memory/4488-3-0x0000000000800000-0x000000000080D000-memory.dmp	upx
behavioral2/memory/4488-5-0x0000000000800000-0x000000000080D000-memory.dmp	upx
C:\Program Files\Common Files\microsoft shared\ink\ar-SA\Winamp 5.0 (en) Crack.ShareReactor.com	upx
behavioral2/memory/4488-61-0x0000000000800000-0x000000000080D000-memory.dmp	upx
behavioral2/memory/4488-132-0x0000000000800000-0x000000000080D000-memory.dmp	upx
behavioral2/memory/4488-133-0x0000000000800000-0x000000000080D000-memory.dmp	upx
behavioral2/memory/4488-196-0x0000000000800000-0x000000000080D000-memory.dmp	upx
behavioral2/memory/4488-270-0x0000000000800000-0x000000000080D000-memory.dmp	upx
behavioral2/memory/4488-297-0x0000000000800000-0x000000000080D000-memory.dmp	upx
behavioral2/memory/4488-298-0x0000000000800000-0x000000000080D000-memory.dmp	upx

Drops file in Program Files directory 64 IoCs

Processes:

c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe

description	ioc	process
File created	C:\Program Files\Common Files\microsoft shared\MSInfo\Harry Potter.com	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Smart Tag\LISTS\1033\ICQ 4 Lite.exe	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\BLENDS\Winamp 5.0 (en) Crack.com	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\PROFILE\ICQ 4 Lite.exe	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\SONORA\Harry Potter.com	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\zh-CN\Kazaa Lite.ShareReactor.com	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\Common Files\microsoft shared\Source Engine\ICQ 4 Lite.com	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\it\index.com	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\Common Files\microsoft shared\MSInfo\uk-UA\Winamp 5.0 (en).exe	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\Office Setup Controller\Winamp 5.0 (en).exe	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\42FD2028-E94B-450A-BE0E-6B9DC3935D12\root\vfs\Windows\assembly\GAC_MSIL\Microsoft.AnalysisServices.SPClient.Interfaces\13.0.0.0__89845DCD8080CC91\Kazaa Lite.exe	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\da-DK\ICQ 4 Lite.exe	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Portal\ICQ 4 Lite.com	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\pt-BR\ICQ 4 Lite.ShareReactor.com	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\INDUST\WinRAR.v.3.2.and.key.exe	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\uk-UA\Harry Potter.ShareReactor.com	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\Common Files\microsoft shared\MSInfo\en-US\Harry Potter.com	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\Common Files\microsoft shared\MSInfo\es-ES\Winamp 5.0 (en).com	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\SUMIPNTG\index.ShareReactor.com	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Portal\1033\index.com	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\ru-RU\Kazaa Lite.com	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\CAPSULES\WinRAR.v.3.2.and.key.exe	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\dotnet\shared\Winamp 5.0 (en) Crack.com	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\pl\Winamp 5.0 (en) Crack.ShareReactor.com	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\zh-Hans\ICQ 4 Lite.ShareReactor.com	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\COMPASS\WinRAR.v.3.2.and.key.exe	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\sv-SE\Winamp 5.0 (en).com	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\nb-NO\WinRAR.v.3.2.and.key.exe	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\th-TH\Kazaa Lite.ShareReactor.com	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\WinRAR.v.3.2.and.key.exe	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\de\index.exe	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\fr\Harry Potter.exe	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\Cultures\Winamp 5.0 (en) Crack.com	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Winamp 5.0 (en).exe	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\insert\index.com	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\Common Files\microsoft shared\Triedit\Winamp 5.0 (en).ShareReactor.com	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Filters\ICQ 4 Lite.com	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\BREEZE\Winamp 5.0 (en).ShareReactor.com	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Web Server Extensions\16\BIN\1033\ICQ 4 Lite.ShareReactor.com	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\Microsoft Office\Updates\Download\PackageFiles\42FD2028-E94B-450A-BE0E-6B9DC3935D12\root\Winamp 5.0 (en).ShareReactor.com	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\pt-BR\Winamp 5.0 (en).com	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\he-IL\Harry Potter.exe	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\Kazaa Lite.ShareReactor.com	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\ru\Winamp 5.0 (en) Crack.com	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\tr\Winamp 5.0 (en) Crack.ShareReactor.com	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\CANYON\index.exe	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\SKY\Winamp 5.0 (en) Crack.exe	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\VBA\VBA7.1\1033\WinRAR.v.3.2.and.key.ShareReactor.com	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\oskpred\WinRAR.v.3.2.and.key.exe	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\cs\Winamp 5.0 (en).exe	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\index.exe	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\pl\Kazaa Lite.ShareReactor.com	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\zh-Hans\WinRAR.v.3.2.and.key.exe	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\EQUATION\1033\Kazaa Lite.com	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\PAPYRUS\Kazaa Lite.ShareReactor.com	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\Common Files\microsoft shared\MSInfo\de-DE\Harry Potter.exe	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\TRANSLAT\ENFR\Winamp 5.0 (en) Crack.com	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\Microsoft Office\Updates\Download\index.com	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\Common Files\microsoft shared\TextConv\Winamp 5.0 (en).com	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\Common Files\microsoft shared\MSInfo\it-IT\Harry Potter.exe	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\BOLDSTRI\Winamp 5.0 (en).ShareReactor.com	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\bg-BG\ICQ 4 Lite.com	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\Winamp 5.0 (en).com	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\hr-HR\index.com	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe

Drops file in Windows directory 2 IoCs

Processes:

c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe

description	ioc	process
File opened for modification	C:\Windows\lsass.exe	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
File created	C:\Windows\lsass.exe	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

Processes:

c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe

C:\Users\Admin\AppData\Local\Temp\c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe
"C:\Users\Admin\AppData\Local\Temp\c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb.exe"
1⤵
- Adds Run key to start application
- Drops file in Program Files directory
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
PID:4488

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1

T1547

Registry Run Keys / Startup Folder

1

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1

T1547

Registry Run Keys / Startup Folder

1

T1547.001

Defense Evasion

Modify Registry

1

T1112

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files\Common Files\microsoft shared\ink\ar-SA\Winamp 5.0 (en) Crack.ShareReactor.com

Filesize
23KB

MD5
c35529caf5fa4afd3eda1751dc343d2c

SHA1
a1846e9d351cb2dbb6be39bbb99cc581a2aea2a3

SHA256
c442e5b6eb272b875c490acec3b6953d4be0b70bb1dbc1791154deff3c6152eb

SHA512
53f2877d781d3a103c6e43d0cf34a0dc000d027f59d8f41a2fad2345ecfd12fd3c01d4cc29f30878041e37f927929712d2df6f368a860fa7d2bba3a354a95f3b

Download Submit
memory/4488-0-0x0000000000800000-0x000000000080D000-memory.dmp

Filesize
52KB

Download
memory/4488-3-0x0000000000800000-0x000000000080D000-memory.dmp

Filesize
52KB

Download
memory/4488-5-0x0000000000800000-0x000000000080D000-memory.dmp

Filesize
52KB

Download
memory/4488-61-0x0000000000800000-0x000000000080D000-memory.dmp

Filesize
52KB

Download
memory/4488-132-0x0000000000800000-0x000000000080D000-memory.dmp

Filesize
52KB

Download
memory/4488-133-0x0000000000800000-0x000000000080D000-memory.dmp

Filesize
52KB

Download
memory/4488-196-0x0000000000800000-0x000000000080D000-memory.dmp

Filesize
52KB

Download
memory/4488-270-0x0000000000800000-0x000000000080D000-memory.dmp

Filesize
52KB

Download
memory/4488-297-0x0000000000800000-0x000000000080D000-memory.dmp

Filesize
52KB

Download
memory/4488-298-0x0000000000800000-0x000000000080D000-memory.dmp

Filesize
52KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads