MAGICDROP
Description
(Mandiant) MAGICDROP is a dropper written in C++. It decrypts files from its .data section and writes them to disk in the system’s %TEMP% directory. The files dropped often include a decoy file, a next-stage payload, and sometimes an installer for the payload.
Names
| Name |
|---|
| MAGICDROP |
Category
Malware
Type
- Dropper
Information
Other Information
Uuid
15590f9a-c40e-41c6-81b9-eb64c50b845b
Last Card Change
2022-09-13