General

  • Target
    https://cdn.discordapp.com/attachments/1514298865778557100/1518667621115891892/TokenGrabber_Pro.exe?ex=6a420130&is=6a40afb0&hm=9856ec85bc46724379534e01e381121c29fc5b5877aa6edfb9c1c42aa9096ddf&
  • Sample260628-ph23lahs9l

Malware Config

Targets

    • Target
      https://cdn.discordapp.com/attachments/1514298865778557100/1518667621115891892/TokenGrabber_Pro.exe?ex=6a420130&is=6a40afb0&hm=9856ec85bc46724379534e01e381121c29fc5b5877aa6edfb9c1c42aa9096ddf&
    • Disables Task Manager via registry modification

    • Downloads MZ/PE file

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks