General
-
Target
https://gcc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fapp.box.com%2Fs%2Fr2dk49pph4ds7qqn2kq57ybs79so6wqk&data=04%7C01%7Cdavid.luna%40twc.state.tx.us%7C9246cb9966f44134b2d708d89874406b%7Cfe7d3f4f241b4af184aa32c57fe9db03%7C0%7C0%7C637426972352358264%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=zweNMGRN4G2hf3gM1Tem4agec7m7P3AOU3r4Cu%2Fg980%3D&reserved=0
-
Sample
201204-qp4sfah98s
Static task
static1
URLScan task
urlscan1
Sample
https://gcc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fapp.box.com%2Fs%2Fr2dk49pph4ds7qqn2kq57ybs79so6wqk&data=04%7C01%7Cdavid.luna%40twc.state.tx.us%7C9246cb9966f44134b2d708d89874406b%7Cfe7d3f4f241b4af184aa32c57fe9db03%7C0%7C0%7C637426972352358264%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=zweNMGRN4G2hf3gM1Tem4agec7m7P3AOU3r4Cu%2Fg980%3D&reserved=0
Behavioral task
behavioral1
Sample
https://gcc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fapp.box.com%2Fs%2Fr2dk49pph4ds7qqn2kq57ybs79so6wqk&data=04%7C01%7Cdavid.luna%40twc.state.tx.us%7C9246cb9966f44134b2d708d89874406b%7Cfe7d3f4f241b4af184aa32c57fe9db03%7C0%7C0%7C637426972352358264%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=zweNMGRN4G2hf3gM1Tem4agec7m7P3AOU3r4Cu%2Fg980%3D&reserved=0
Resource
win10v20201028
Malware Config
Targets
-
-
Target
https://gcc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fapp.box.com%2Fs%2Fr2dk49pph4ds7qqn2kq57ybs79so6wqk&data=04%7C01%7Cdavid.luna%40twc.state.tx.us%7C9246cb9966f44134b2d708d89874406b%7Cfe7d3f4f241b4af184aa32c57fe9db03%7C0%7C0%7C637426972352358264%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=zweNMGRN4G2hf3gM1Tem4agec7m7P3AOU3r4Cu%2Fg980%3D&reserved=0
Score7/10-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-