General

  • Target
    http://filesharing.s.gy/syntex-hwid-spoofer
  • Sample260708-a9bbmagy6s

Malware Config

Targets

    • Target
      http://filesharing.s.gy/syntex-hwid-spoofer
    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Downloads MZ/PE file

    • Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks