General

  • Target
    https://c8646cfef541ce7a451ebd88b9074efb.r2.cloudflarestorage.com/filerift/643d87f8-5d61-4c3c-8c7b-82fa75d242fc---Madium-Bootstrapper.zip?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Content-Sha256=UNSIGNED-PAYLOAD&X-Amz-Credential=43cf367050590a138cc183e7557ba614%2F20260711%2Fauto%2Fs3%2Faws4_request&X-Amz-Date=20260711T191832Z&X-Amz-Expires=6000&X-Amz-Signature=386d8e15487a424392bbb423299f8a7a955bdd6bab1f57bf1cef6e346084c78d&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3D%22Madium-Bootstrapper.zip%22&x-amz-checksum-mode=ENABLED&x-id=GetObject
  • Sample260711-x2dhcaby4t

Malware Config

Targets

    • Target
      https://c8646cfef541ce7a451ebd88b9074efb.r2.cloudflarestorage.com/filerift/643d87f8-5d61-4c3c-8c7b-82fa75d242fc---Madium-Bootstrapper.zip?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Content-Sha256=UNSIGNED-PAYLOAD&X-Amz-Credential=43cf367050590a138cc183e7557ba614%2F20260711%2Fauto%2Fs3%2Faws4_request&X-Amz-Date=20260711T191832Z&X-Amz-Expires=6000&X-Amz-Signature=386d8e15487a424392bbb423299f8a7a955bdd6bab1f57bf1cef6e346084c78d&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3D%22Madium-Bootstrapper.zip%22&x-amz-checksum-mode=ENABLED&x-id=GetObject
    • Executes dropped EXE

    • Checks whether UAC is enabled

    • Network Share Discovery

      Attempt to gather information on host network.

MITRE ATT&CK Enterprise v16

Tasks