General

  • Target
    https://cdn.discordapp.com/attachments/1480829271063662634/1540780546664439818/InternalPRIV.exe?ex=6a8b3334&is=6a89e1b4&hm=abb5f29aa97ce17817498d33e2ab0dd67405d7e65e3c17a39fa2f6fd2c4090ec&
  • Sample260822-wkhv3asvas

Malware Config

Targets

    • Target
      https://cdn.discordapp.com/attachments/1480829271063662634/1540780546664439818/InternalPRIV.exe?ex=6a8b3334&is=6a89e1b4&hm=abb5f29aa97ce17817498d33e2ab0dd67405d7e65e3c17a39fa2f6fd2c4090ec&
    • Downloads MZ/PE file

    • Executes dropped EXE

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks