Download PneumaEX packed JPG

/static/assets/windows-logo.svg
Uses CastOff downloader to download a JPG containing the CastOut MBR Wiper.
locked
View Command

To view this TTPs command, you must be logged in with a professional or enterprise license.

Login

Test this TTP

Download Operator (1.7.1)
Test this TTP using one of our Operator chains
APT38 DarkSeoul

2022-05-16

/static/assets/windows-logo.svg
Destructive Master Boot Record (MBR) wiper malware.