Microsoft Visual Studio CoreCLR Debugger

Reported Context (1)

The installer inside the archives is a copy of the legitimate Microsoft Visual Studio CoreCLR Debugger, ‘vsdbg.exe,’ renamed and configured to sideload a malicious DLL (vsdbg.dll). Fake GitHub Repositories Deliver Rapuncel Infostealer and EDR-Killing Driver

Malware (3)

People (1)

MITRE ATT&CK (10)

Vendors (3)

Products (5)

Tools (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.