18
/
en
AIzaSyCYaC8UkdPkQKLFUmpasLV5eC3M802CrcA
Create
Public Timelines
Library
FAQ
Get Premium for free!
Download
Export
Duplicate
Embed
Edit
malware infection
Created by
abel
Comments
142 views
0
0
Updated
17 Oct 2017
Events
Malware wnhelp.exe was build
ScreenConnect RAT was backdoorized and packaged
Microssupport User downloaded and installed the RAT
First execution of the memory scrapper malware
Attacker dumped the system credentials
ScreenConnect RAT activity
ScreenConnect RAT and Memory scrapper activity
wnhelp memory scrapper activity
dump of CC found
dump of CC found
ScreenConnect RAT Activity
RAT and malware activity and dump of system credentials
Periods
The system was compromissed
