General

  • Target
    https://j1q9m9d4.wetransfer.icu/?engine=r63+script+roblox
  • Sample260706-a1c4vsgy3t

Malware Config

Targets

    • Target
      https://j1q9m9d4.wetransfer.icu/?engine=r63+script+roblox
    • Suspicious use of NtCreateProcessExOtherParentProcess

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks