General

  • Target
    https://davidkazumisource.com/hypervisor
  • Sample260721-snt6qabe84

Malware Config

Targets

    • Target
      https://davidkazumisource.com/hypervisor
    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

    • Modifies boot configuration data using bcdedit

    • Probable phishing domain

MITRE ATT&CK Enterprise v16

Tasks