cmstp.exe

Reported Context (2)

A malicious downloader used a portable Java runtime, PowerShell and LOLBins like cmstp.exe to run a harmful JAR, evade detection, establish persistence, and connect the RAT to C2 79.110.49[.]15 for data theft and Microsoft Warns of RAT Delivered Through Trojanized Gaming Utilities
that stages a portable Java runtime and runs a malicious jd-gui.jar using PowerShell and LOLBins like cmstp.exe. Trojanized Gaming Tools Deliver a Java RAT Through Browsers and Chat Platforms

Malware (3)

People (1)

MITRE ATT&CK (7)

Vendors (1)

Products (2)

Tools (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.