Resubmissions

28/03/2025, 21:12

250328-z2mr5a1xc1 8

28/03/2025, 21:08

250328-zy7ywssrx5 8

General

  • Target

    https://www.mediafire.com/file/ix1zxdt59pd5m1n/cryptic-installer.exe/file

  • Sample

    250328-z2mr5a1xc1

Malware Config

Targets

    • Target

      https://www.mediafire.com/file/ix1zxdt59pd5m1n/cryptic-installer.exe/file

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Checks whether UAC is enabled

    • Legitimate hosting services abused for malware hosting/C2

    • Network Share Discovery

      Attempt to gather information on host network.

MITRE ATT&CK Enterprise v15

Tasks