General

  • Target

    http://url8795.enlyft-protection.com/ls/click?upn=bNf5wLhVtbyKnBBOBl-2BDW0KEzv2ce457zRMinFRady0-3DNyWP_-2FP6ULzuVFKETvenKb6tx5Tvuzij9S-2FvO-2Fd1IYwOMD9tx3f7ypCHSILaf7DWUunxufqg0sqKWGAKlohRSjAchC8a-2FPLfCdeIBRNd-2BRomMlCpGfcguu88RKL-2BX7GX9dJoDhY3opgeXgU5YjR2FZbyiIHb-2BbT3rIzYGML5-2FArfuUMpSjoX6gco9bgX6OGb6HqeczipaYftruSY-2BmAifv6dsSU7ckKf2bPZBtZpsnTtsOus-3D

  • Sample

    230922-pa7m4shg76

Score
6/10

Malware Config

Targets

    • Target

      http://url8795.enlyft-protection.com/ls/click?upn=bNf5wLhVtbyKnBBOBl-2BDW0KEzv2ce457zRMinFRady0-3DNyWP_-2FP6ULzuVFKETvenKb6tx5Tvuzij9S-2FvO-2Fd1IYwOMD9tx3f7ypCHSILaf7DWUunxufqg0sqKWGAKlohRSjAchC8a-2FPLfCdeIBRNd-2BRomMlCpGfcguu88RKL-2BX7GX9dJoDhY3opgeXgU5YjR2FZbyiIHb-2BbT3rIzYGML5-2FArfuUMpSjoX6gco9bgX6OGb6HqeczipaYftruSY-2BmAifv6dsSU7ckKf2bPZBtZpsnTtsOus-3D

    Score
    6/10
    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks