General

  • Target
    https://cdn.discordapp.com/attachments/1143641147072327691/1520906335783358594/Agent_3_0_2.exe?ex=6a44e027&is=6a438ea7&hm=8557e46693dc07c0615dc4a12dfe2cb19c986768356958d8d59f1ed23a51e943&
  • Sample260630-yn49ksey9n

Malware Config

Targets

    • Target
      https://cdn.discordapp.com/attachments/1143641147072327691/1520906335783358594/Agent_3_0_2.exe?ex=6a44e027&is=6a438ea7&hm=8557e46693dc07c0615dc4a12dfe2cb19c986768356958d8d59f1ed23a51e943&
    • Downloads MZ/PE file

    • Obfuscated with Agile.Net obfuscator

      Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

MITRE ATT&CK Enterprise v16

Tasks