General

  • Target
    https://cdn.discordapp.com/attachments/1537587450308722912/1541303267739435039/txzy_pasted_paid_temp_leak.rar?ex=6a910e87&is=6a8fbd07&hm=857fc76bc237c03c0f22ecef0f49611c32fdd845c9d0f480fa4a1b4c191be1f0&
  • Sample260827-jds18sen2x

Malware Config

Targets

    • Target
      https://cdn.discordapp.com/attachments/1537587450308722912/1541303267739435039/txzy_pasted_paid_temp_leak.rar?ex=6a910e87&is=6a8fbd07&hm=857fc76bc237c03c0f22ecef0f49611c32fdd845c9d0f480fa4a1b4c191be1f0&
    • Sets service image path in registry

      This determines the executable launched when a service starts. It can be used to establish persistence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks