From Mega to Giga: Cross-Version Comparison of Top MegaCortex Modifications
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Data Code Signing Certificates - T1587.002 Code Signing Certificates - T1588.003 Malware - T1587.001 Malware - T1588.001 Rundll32 - T1218.011 Software - T1592.002 Tool - T1588.002 Rundll32 - T1085
Show in Graph
Common Information
Type Value
UUID 50ab5fc8-f61e-4258-a059-8df36bfd8e58
Fingerprint 3db6391128a59a91
Analysis status DONE
Considered CTI value 0
Text language
Published Jan. 8, 2020, 6 a.m.
Added to db Sept. 26, 2022, 9:32 a.m.
Last updated Nov. 17, 2024, 6:55 p.m.
Headline UNKNOWN
Title From Mega to Giga: Cross-Version Comparison of Top MegaCortex Modifications
Detected Hints/Tags/Attributes 75/2/12
Source URLs
Redirection Url
Details Source https://securityintelligence.com/posts/from-mega-to-giga-cross-version-comparison-of-top-megacortex-modifications/
URL Provider
Details Provider Source level domain
Details securityintelligence.com securityintelligence.com
Attributes
Details Type #Events CTI Value
Details File 23 
payload.dll
Details File 1 
injecthelper.dll
Details File 1018 
rundll32.exe
Details File 345 
vssadmin.exe
Details File 20 
cipher.exe
Details File 1 
qibfmqke.dll
Details File 1 
megacortex.exe
Details File 1 
c:\whytltozw8.log
Details File 1 
qibfmqkem5.log
Details File 1 
c:\programdata\microsoft\windows .bat
Details File 1 
rand_name.exe
Details File 3 
env.exe