General

  • Target

    https://ace.abb.com/CamAccessApprovalProcessWeb/web/accessapproval/accessApprovalAction.jsp?p=gwAiV9iHWkGIAQ2mEpPsqbyGefP49Ox7OpWJDxv2GoiLFfN9fyOP0QpED8TWw9DKOu8chIXU33Nk%0D%0AXf2nu0JYjKQZNlGgLSVncX5apASY6naEW6REM89R7xyMJeWOQEDVm5jMSX94Ka53UoyzMjxW26SC%0D%0AKYvP7tKA27C7uLMKa3I%3D&app_oid=001

  • Sample

    230324-ce81hsbe79

Malware Config

Targets

    • Target

      https://ace.abb.com/CamAccessApprovalProcessWeb/web/accessapproval/accessApprovalAction.jsp?p=gwAiV9iHWkGIAQ2mEpPsqbyGefP49Ox7OpWJDxv2GoiLFfN9fyOP0QpED8TWw9DKOu8chIXU33Nk%0D%0AXf2nu0JYjKQZNlGgLSVncX5apASY6naEW6REM89R7xyMJeWOQEDVm5jMSX94Ka53UoyzMjxW26SC%0D%0AKYvP7tKA27C7uLMKa3I%3D&app_oid=001

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Registry Run Keys / Startup Folder

1
T1060

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks