General
- Target https://github.com/fghdhgfdgjhbdxhfgvdj/TempSpoofer-Spoofer-cleaner-UD/releases/download/Spoofer/Cleaner.exe
- Sample261024-tftqnavxgy
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://github.com/fghdhgfdgjhbdxhfgvdj/TempSpoofer-Spoofer-cleaner-UD/releases/download/Spoofer/Cleaner.exe
Resource
win10v2004-20260911-en
Malware Config
Targets
-
- Target https://github.com/fghdhgfdgjhbdxhfgvdj/TempSpoofer-Spoofer-cleaner-UD/releases/download/Spoofer/Cleaner.exe
-
Downloads MZ/PE file
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Defense Evasion
Impair Defenses
1Disable or Modify System Firewall
1Indicator Removal
1File Deletion
1Modify Registry
2Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1