General

  • Target

    https://www.googleadservices.com/pagead/aclk?sa=L&ai=CbJd3sCyjYO_BDLzZzLUP_qS80AzC3IHPYv3r5fjSDdrZHhABIIaPgAJgxaHnAaABoaC4mAPIAQGpAr5qq0DYZbQ-qAMBqgSbAU_Qk94Sx5r_Q48jPoBMQF9TviEWXy0InS278jpatlbGgjaoYPBCXssihr3-lLb6RW3U5BudzSxZGT-30cD8WRPtXD5bqSrKWCKKC4nDmFMHoOBTPPEoUbVzb3TL0SxYNnGwZIxZg8Qg6cHcOG2ZMi7mJjqVfRlXKOgPqBGn44gkH5J6hcCC2lU1fE2s6IBn431fCJ_oetlvLPYowAT9gqnuuQOQBgGgBniAB8ffx2eIBwGQBwKoB7OYsQKoB9XJG6gH8NkbqAfy2RuoB47OG6gHk9gbqAe6BqgH4OAbqAfulrECqAemvhuoB-zVG6gH89EbqAfs1RuoB5bYG9gHAKgIAdIIBggAEAIYArEJN8pCFI6-u-SAChOYCwHICwXQCyyADAG4DAHYEw2IFAGoFQHQFQHYFQGAFwE&ae=1&cit=CkUKCQjwqIiFBhCuARI0ADBn_g5yNzP5gr4GwDRyC0wWh40J_AL1x--dSZDGcF-f3qrPpmtE1XOO0gkvG3UOamQfchoCZo7w_wcB&num=1&cid=CAMSOQClSFh3mB8oXuW8iwxOjCVZM5Oez-1g_oQsTRvxREwO1JLbLmOinRiNxYIwZVpeX7aX4sibPbv0OQ&sig=AOD64_0Dn4sUD0mvfLE9rRLfY8VhEmTaDQ&client=ca-gmail&adurl=https%3a%2f%2foffice365.dk2b4m08027nd.amplifyapp.com/?dg=cheryl.m.wandling@kp.org

  • Sample

    211021-t734eaaee6

Malware Config

Targets

    • Target

      https://www.googleadservices.com/pagead/aclk?sa=L&ai=CbJd3sCyjYO_BDLzZzLUP_qS80AzC3IHPYv3r5fjSDdrZHhABIIaPgAJgxaHnAaABoaC4mAPIAQGpAr5qq0DYZbQ-qAMBqgSbAU_Qk94Sx5r_Q48jPoBMQF9TviEWXy0InS278jpatlbGgjaoYPBCXssihr3-lLb6RW3U5BudzSxZGT-30cD8WRPtXD5bqSrKWCKKC4nDmFMHoOBTPPEoUbVzb3TL0SxYNnGwZIxZg8Qg6cHcOG2ZMi7mJjqVfRlXKOgPqBGn44gkH5J6hcCC2lU1fE2s6IBn431fCJ_oetlvLPYowAT9gqnuuQOQBgGgBniAB8ffx2eIBwGQBwKoB7OYsQKoB9XJG6gH8NkbqAfy2RuoB47OG6gHk9gbqAe6BqgH4OAbqAfulrECqAemvhuoB-zVG6gH89EbqAfs1RuoB5bYG9gHAKgIAdIIBggAEAIYArEJN8pCFI6-u-SAChOYCwHICwXQCyyADAG4DAHYEw2IFAGoFQHQFQHYFQGAFwE&ae=1&cit=CkUKCQjwqIiFBhCuARI0ADBn_g5yNzP5gr4GwDRyC0wWh40J_AL1x--dSZDGcF-f3qrPpmtE1XOO0gkvG3UOamQfchoCZo7w_wcB&num=1&cid=CAMSOQClSFh3mB8oXuW8iwxOjCVZM5Oez-1g_oQsTRvxREwO1JLbLmOinRiNxYIwZVpeX7aX4sibPbv0OQ&sig=AOD64_0Dn4sUD0mvfLE9rRLfY8VhEmTaDQ&client=ca-gmail&adurl=https%3a%2f%2foffice365.dk2b4m08027nd.amplifyapp.com/?dg=cheryl.m.wandling@kp.org

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Modify Registry

1
T1112

Tasks