General

  • Target
    https://cdn.discordapp.com/attachments/1523884930072051762/1528339358145314926/v1.1.0.zip?ex=6a78f732&is=6a77a5b2&hm=914f3d465a4be059abae94b66bc4745a4326aadb704fa809eb0a270e8d5b836c&
  • Sample260809-gx3nnshb22

Malware Config

Targets

    • Target
      https://cdn.discordapp.com/attachments/1523884930072051762/1528339358145314926/v1.1.0.zip?ex=6a78f732&is=6a77a5b2&hm=914f3d465a4be059abae94b66bc4745a4326aadb704fa809eb0a270e8d5b836c&
    • Executes dropped EXE

    • Loads dropped DLL

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

    • Power Settings

      powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.

MITRE ATT&CK Enterprise v16

Tasks