General

  • Target
    https://pakistanpressfoundation.org/nccia-arrests-four-individuals-in-punjab-for-cyber-harassment-and-blackmail-of-women/
  • Sample260804-pz9trser4z
Score
10/10

Malware Config

Extracted

Language
  • hta

Source
URLs
  • hta.dropper

    https://fine-work-team.com/6272

Targets

    • Target
      https://pakistanpressfoundation.org/nccia-arrests-four-individuals-in-punjab-for-cyber-harassment-and-blackmail-of-women/
    Score
    10/10
    • An obfuscated cmd.exe command-line is typically used to evade detection.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks