General

  • Target
    http://sciboz-timbres.ch
  • Sample260806-14s8csvtfs

Malware Config

Targets

    • Target
      http://sciboz-timbres.ch
    • Indicator Removal: Network Share Connection Removal

      Adversaries may remove share connections that are no longer useful in order to clean up traces of their operation.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks