General

  • Target
    https://drive.google.com/file/d/1GvyojKDWJLwg4I1iG_1xe_nSrgKx7Xfd/view
  • Sample260718-vsvn6abx9w

Malware Config

Targets

    • Target
      https://drive.google.com/file/d/1GvyojKDWJLwg4I1iG_1xe_nSrgKx7Xfd/view
    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Downloads MZ/PE file

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Network Share Discovery

      Attempt to gather information on host network.

MITRE ATT&CK Enterprise v16

Tasks