Are MOUSEISLAND malware procedures mitigated on this host?
Tactic: Execution
CISA released an advisory in August 2022 on MOUSEISLAND, which is classified as a macro downloader. This TTP downloads a ZIP file, extracts it, and if MS Office is installed then attempts to run it. The macro attempts to download an EICAR file. Protection from MOUSEISLAND is important because this malware serves as the initial phase for ransomware.
View Command
To view this TTPs command, you must be logged in with a professional or enterprise license.
LoginTest this TTP
Download Operator (1.7.1)
Test this TTP using one of our Operator chainsEmulates procedures found in MOUSEISLAND malware.
Are MOUSEISLAND malware procedures mitigated on this host?
2022-09-19
Follow @preludeorg on Twitter for new chains and more.
Join the Prelude Discord to discuss chains and more.
Keep up to date with code changes and community activity on Github