General

  • Target

    https://timefinance.lt.emlnk.com/Prod/link-tracker?notrack=1&redirectUrl=aHR0cHMlM0ElMkYlMkZpcGZzLmlvJTJGaXBmcyUyRmJhZnliZWlhYXNhenFlbXZyNGM2ZDRmMnhrN256azZpdWt4eDNsZXlwcTZmc3lzd3RzamxrbDJiZzU0JTJGc2lscmFzaF9vd2E0NjQ3MC5odG1s&sig=F4FAF1DKeQBJXeJAj8Mv7Wwp83Zo2oUE6cEQSwqLJrxb&iat=1679963225&a=%7C%7C68902152%7C%7C&account=timefinance%2Eactivehosted%2Ecom&email=B4REdAMcGUYDg6msB1w1kl0qRPeqg3%2Fw7Jx6o09YNEmgVFRK%3AdkWEED6f2g3P91v%2F%2FTk8YoMMAcYMWaCY&s=aXJpcy5rYXZjaWNAbGVvbmUuc2k=&i=1A3A1A1#kmokdad@cpm.co.ma

  • Sample

    230328-nhv4lscc9z

Malware Config

Targets

    • Target

      https://timefinance.lt.emlnk.com/Prod/link-tracker?notrack=1&redirectUrl=aHR0cHMlM0ElMkYlMkZpcGZzLmlvJTJGaXBmcyUyRmJhZnliZWlhYXNhenFlbXZyNGM2ZDRmMnhrN256azZpdWt4eDNsZXlwcTZmc3lzd3RzamxrbDJiZzU0JTJGc2lscmFzaF9vd2E0NjQ3MC5odG1s&sig=F4FAF1DKeQBJXeJAj8Mv7Wwp83Zo2oUE6cEQSwqLJrxb&iat=1679963225&a=%7C%7C68902152%7C%7C&account=timefinance%2Eactivehosted%2Ecom&email=B4REdAMcGUYDg6msB1w1kl0qRPeqg3%2Fw7Jx6o09YNEmgVFRK%3AdkWEED6f2g3P91v%2F%2FTk8YoMMAcYMWaCY&s=aXJpcy5rYXZjaWNAbGVvbmUuc2k=&i=1A3A1A1#kmokdad@cpm.co.ma

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

2
T1012

System Information Discovery

1
T1082

Tasks