General

  • Target
    IronBrew2 CLI.csproj
  • Size 339B
  • Sample260626-ygsbfae12m
  • SHA256 7976a3d7acdab87041e4ec861c191356f3da13c5725f91b42cb522a19e6a2a1d
  • MD5 SHA1 SHA512 TLSH

Malware Config

Targets

    • Target
      IronBrew2 CLI.csproj
    • Size 339B
    • SHA256 7976a3d7acdab87041e4ec861c191356f3da13c5725f91b42cb522a19e6a2a1d
    • MD5 SHA1 SHA512 TLSH
    • Downloads MZ/PE file

    • Event Triggered Execution: Component Object Model Hijacking

      Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks