General

  • Target
    https://aderir.com/
  • Sample250626-wdpp2adl7v
Score
8/10

Malware Config

Targets

    • Target
      https://aderir.com/
    Score
    8/10
    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v16

Tasks