General

  • Target
    https://cdn.discordapp.com/attachments/1516089294769487984/1529514629779292210/Z1RO.rar?ex=6a623700&is=6a60e580&hm=d6622daec6e52eb23499be378232960bf880d7c989f90ca08edc39b74f3be206&
  • Sample260722-s65p6scl7w

Malware Config

Targets

    • Target
      https://cdn.discordapp.com/attachments/1516089294769487984/1529514629779292210/Z1RO.rar?ex=6a623700&is=6a60e580&hm=d6622daec6e52eb23499be378232960bf880d7c989f90ca08edc39b74f3be206&
    • Drops file in Drivers directory

    • Sets service image path in registry

      This determines the executable launched when a service starts. It can be used to establish persistence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks