General

  • Target
    https://rsload.org/antares-autotune/
  • Sample260907-2y17fshp2s

Malware Config

Targets

    • Target
      https://rsload.org/antares-autotune/
    • Indirect Command Execution

      Adversaries may abuse utilities that allow for command execution to bypass security restrictions that limit the use of command-line interpreters.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks