General

  • Target
    http://filesharing.s.gy/syntex-hwid-spoofer
  • Sample260805-agb3fstdqf

Malware Config

Targets

    • Target
      http://filesharing.s.gy/syntex-hwid-spoofer
    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Downloads MZ/PE file

MITRE ATT&CK Enterprise v16

Tasks