General

  • Target
    https://butterfly-moments.screenconnect.com/Bin/ScreenConnect.ClientSetup.exe?e=Access&y=Guest&c=&c=0474&c=&c=&c=&c=&c=&c=&data=05|02|[email protected]|aa212d216777431e4ada08dee33c8784|10338048193a4298abea3596ae88b05e|0|0|639198046279358655|Unknown|TWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ==|0|||&sdata=Vl54oXZLRwibfD0ncltGdexl1tfER0U4hajAuMKO2IE=&reserved=0
  • Sample260716-rykvcsfw2r

Malware Config

Targets

    • Target
      https://butterfly-moments.screenconnect.com/Bin/ScreenConnect.ClientSetup.exe?e=Access&y=Guest&c=&c=0474&c=&c=&c=&c=&c=&c=&data=05|02|[email protected]|aa212d216777431e4ada08dee33c8784|10338048193a4298abea3596ae88b05e|0|0|639198046279358655|Unknown|TWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ==|0|||&sdata=Vl54oXZLRwibfD0ncltGdexl1tfER0U4hajAuMKO2IE=&reserved=0
    • Downloads MZ/PE file

    • Drops desktop.ini file(s)

    • Detected potential entity reuse from brand GOOGLE.

MITRE ATT&CK Enterprise v16

Tasks