General

  • Target
    Release1.3.15.zip
  • Size 1.3MB
  • Sample260604-ngfbrses2q
  • SHA256 3c1cfbe70d28d9e559f07161cf7f320bef48a60f12f701115bc90643a73f8286
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Drift.exe
    • Size 1.4MB
    • SHA256 8ebdc43841111f569d5ed13fec5267ca4f0388c8652fc17652c9140d7b47c263
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Drops desktop.ini file(s)

    • Detected potential entity reuse from brand GOOGLE.

MITRE ATT&CK Enterprise v16

Tasks