Mjag dropper Using decoy documents to drop RATs
released on 2019-01-11 @ 12:33:04 PM
Mjag dropper is compiled in the Microsoft .NET framework, and its original binary is obfuscated using SmartAssembly. The installation path and other details are stored in encrypted form using AES encryption (Fig. 1), and the decryption key is hardcoded.