General

  • Target
    https://www.dropbox.com/scl/fi/byfv62d2rlnw35dtuei21/update.exe?rlkey=iefw90u57git5abrfzclz5wbu&st=r7e3d21n&dl=1
  • Sample260827-232nsa1fpc

Malware Config

Targets

    • Target
      https://www.dropbox.com/scl/fi/byfv62d2rlnw35dtuei21/update.exe?rlkey=iefw90u57git5abrfzclz5wbu&st=r7e3d21n&dl=1
    • Command and Scripting Interpreter: PowerShell

      Run Powershell to get system information as a root user.

    • Downloads MZ/PE file

    • Discovers running processes

      Running process information can be used to identify security tools or plan follow-on actions.

MITRE ATT&CK Enterprise v16

Tasks