General

  • Target
    https://github.com/Spencer0187/Spencer-Macro-Utilities/releases/download/V3.2.1/suspend-3.2.1.exe
  • Sample260727-nbfeks1wes

Malware Config

Targets

    • Target
      https://github.com/Spencer0187/Spencer-Macro-Utilities/releases/download/V3.2.1/suspend-3.2.1.exe
    • Downloads MZ/PE file

    • Executes dropped EXE

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

MITRE ATT&CK Enterprise v16

Tasks