General

  • Target
    https://cdn.discordapp.com/attachments/970142715864035369/1101660150730866768/Custom_roads_by_Gambohub.rar?ex=6a82f8b7&is=6a81a737&hm=dc3ba3ce7d1991cdc32a4274d9253bc07dde0f62b536584d22011296676d5f0b&
  • Sample260816-v32kfsfl8w

Malware Config

Targets

    • Target
      https://cdn.discordapp.com/attachments/970142715864035369/1101660150730866768/Custom_roads_by_Gambohub.rar?ex=6a82f8b7&is=6a81a737&hm=dc3ba3ce7d1991cdc32a4274d9253bc07dde0f62b536584d22011296676d5f0b&
    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

MITRE ATT&CK Enterprise v16

Tasks