Resubmissions

24-12-2024 00:51

241224-a7m8eawrhs 10

24-12-2024 00:42

241224-a2skyawqdy 8

General

  • Target

    https://t.me/RELabDiscussion/30886

  • Sample

    241224-a2skyawqdy

Malware Config

Targets

    • Target

      https://t.me/RELabDiscussion/30886

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Obfuscated with Agile.Net obfuscator

      Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v15

Tasks