General

  • Target
    https://ts.buzzheavier.com/d/98ehstl39wou?v=J6RWEgVVIjWs5wyBXA-3efvt92r4LcuFR0MqoNTwioaXxhFpA8n3R-twYgTlUAul2UUW8FcC6EQrTG79o9lIt_KYuK1_IPdJ3-M6r4C2FOHJHkaUp713CY2fLba-NdggI3atKXe_OCVWxNtyeb0jT8DpAHRqo3XvHZ32vZUxpDl1GA
  • Sample260907-r67dbsyfpb

Malware Config

Targets

    • Target
      https://ts.buzzheavier.com/d/98ehstl39wou?v=J6RWEgVVIjWs5wyBXA-3efvt92r4LcuFR0MqoNTwioaXxhFpA8n3R-twYgTlUAul2UUW8FcC6EQrTG79o9lIt_KYuK1_IPdJ3-M6r4C2FOHJHkaUp713CY2fLba-NdggI3atKXe_OCVWxNtyeb0jT8DpAHRqo3XvHZ32vZUxpDl1GA
    • Sets service image path in registry

      This determines the executable launched when a service starts. It can be used to establish persistence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks