General

  • Target
    https://app.recordedfuture.com/portal/intelligence-card/url:http:/emprdr4p7iwlhpky33tswt3k2qdeljyjcdpoysabudmmrz4z32laexad.onion/post/hanwha-renewables/%230/overview?organization=uhash:2axeb5danX
  • Sample260828-1472hsec52

Malware Config

Targets

    • Target
      https://app.recordedfuture.com/portal/intelligence-card/url:http:/emprdr4p7iwlhpky33tswt3k2qdeljyjcdpoysabudmmrz4z32laexad.onion/post/hanwha-renewables/%230/overview?organization=uhash:2axeb5danX
    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v16

Tasks