General

  • Target
    https://cdn.discordapp.com/attachments/1532322893290016768/1533746209276301352/Craftrise32bit.exe?ex=6a719bf7&is=6a704a77&hm=835cb5157249d889455e610c205552b40b47035da37831931f26abc0996b4038&
  • Sample260803-wgc6eavckd

Malware Config

Targets

    • Target
      https://cdn.discordapp.com/attachments/1532322893290016768/1533746209276301352/Craftrise32bit.exe?ex=6a719bf7&is=6a704a77&hm=835cb5157249d889455e610c205552b40b47035da37831931f26abc0996b4038&
    • Downloads MZ/PE file

    • Executes dropped EXE

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks