Payload Hosting

This record maps to MITRE ATT&CK T1105, Ingress Tool Transfer: transferring tools or other files from an external system into a compromised environment through command and control, alternate protocols, or between compromised devices. The first three steps are alternative download methods for a single file; choose one, then optionally use the final step to compare its SHA-256 with an independently obtained trusted value. These procedures transfer or hash a file and do not execute the saved file.