General

  • Target
    https://cdn.discordapp.com/attachments/1399684121503989770/1536369596729131169/Cosmic.7z?ex=6a7b2730&is=6a79d5b0&hm=0dbc4d0bec74dcd3f133110ef676487c4041ca2f49a57d5ac53afe72682ed23c&
  • Sample260810-vj54jadn2w

Malware Config

Targets

    • Target
      https://cdn.discordapp.com/attachments/1399684121503989770/1536369596729131169/Cosmic.7z?ex=6a7b2730&is=6a79d5b0&hm=0dbc4d0bec74dcd3f133110ef676487c4041ca2f49a57d5ac53afe72682ed23c&
    • Executes dropped EXE

    • Checks whether UAC is enabled

    • Network Share Discovery

      Attempt to gather information on host network.

    • Discovers running processes

      Running process information can be used to identify security tools or plan follow-on actions.

MITRE ATT&CK Enterprise v16

Tasks