Operation XENOFISCAL: SideCopy deploying persistent XenoRAT targeting the MoF, Afghanistan

Authors: Dixit Panchal & Vaibhav Krushna Billade Table of Contents: Introduction: Key Targets: Infection Chain: Initial Findings about Campaign: Analysis of Decoy: Technical Analysis: Stage 1: Analysis of LNK File. Stage 2: Analysis of HTA/JavaScript Payload Stage 3: Analysis of Stage-1 Loader DLL Stage 4: Analysis of Stage-2 Loader DLL and Shellcode Stage 5: Analysis of XenoRAT. Infrastructural Artefacts & Threat actor Attributions.