General

  • Target
    https://www.mediafire.com/folder/vs9ujs6n4ehl7/Amari
  • Sample260805-rcxa9sttht

Malware Config

Targets

    • Target
      https://www.mediafire.com/folder/vs9ujs6n4ehl7/Amari
    • Suspicious use of NtCreateProcessExOtherParentProcess

    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks