General

  • Target
    https://uc7d6a8f4756fe50f2a389274399.dl.dropboxusercontent.com/cd/0/get/DF6peZIVhEXI97wKvPcIxpLwJVcPXMBTR_0RMaz94udjwQUqhBFuDnXVs7zh5O-K12iSFSdKApT2CAbP-x3M3KWRd4EfUtpsjTNreajgEOqL6igXJLk2-eTzp7636O5SdlsbKHr7POO9pa7GBz0Kvp58/file?dl=1
  • Sample260810-rhvpmawtbt

Malware Config

Targets

    • Target
      https://uc7d6a8f4756fe50f2a389274399.dl.dropboxusercontent.com/cd/0/get/DF6peZIVhEXI97wKvPcIxpLwJVcPXMBTR_0RMaz94udjwQUqhBFuDnXVs7zh5O-K12iSFSdKApT2CAbP-x3M3KWRd4EfUtpsjTNreajgEOqL6igXJLk2-eTzp7636O5SdlsbKHr7POO9pa7GBz0Kvp58/file?dl=1
    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks