General

  • Target
    https://www.comtecdev.com/
  • Sample260622-t7eqtaex3t

Malware Config

Targets

    • Target
      https://www.comtecdev.com/
    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Drops desktop.ini file(s)

    • Detected potential entity reuse from brand GOOGLE.

MITRE ATT&CK Enterprise v16

Tasks