General

  • Target

    https://62777ab2890.pages.dev/?309b4092200cdd66bf8b39f0f3b1a6a2lr0seuuj=U2FsdGVkX1%2FA7vAasds05%2F5%2F8Lh7pWDSPDb%2BFrowzK8ecIWHAZgDDhA0iSHM1Dw3HHNgssuEtY7HcXHrn5%2Bxw9JnyPPDTTazz%2FLjFtpbl6a6zDkQJolzaP1asqSs1xRi3egTG6Jcjg1GKks3tgpGEyYS%2Fhn0zSW8FKdPVaKtuvpmTKQ1i%2Fbd%2BpGDLYFvknjpD6Xts9JopveY9jvDVUSWjHGnzsZ3JU9THQkEZPrGHi7LhszVXAgMAoLFhNK%2FgFTwuBIG7QHdP2MLIIheHXWgLh9%2BBTZeb5LnHhJSRvVYxWCjJ2JcjVdyxGG1CvbXkTNNhOqkwS3mLxA9tfg7fofbNQdcmVAMSB8wXSnjrOHdYeGrsD1mqZEzacqpAevZsUeLoH0XrBvzz9nFJ8WAiVbheGOq01j%2BYnR2%2BAul96%2FrxH46cTNwdsuY3pUBwSD4ZS2xJvDRkCRF%2BlLXbmkDBgdju0q6m3RMYfFrdkaveKKDJmoJxkB6l26uzgOaHUQhyit6xGhQ9PyfK3LDKrZcD%2F%2BhQs%2B1mCYM%2F8mH5OYSTBolUlMDb7TfR%2F4fnZGD913Jq%2BU0CWXTvixBipzieDuFQOug5FJjB%2FIiULyEXezzFgsOpB1xV2RFZK65o%2FpdbxQ9in3Lfr5QK%2Fiy6XKIuskR6II7v1zEicYdIuB0p3i2V2WXcHWnt5LzvK3nhpkSRyLVWTkrpYXj849vRbBzaYWnBjlBqCQ2tj8YfIk4xPazS%2FEtrhGj129IP6kryY0C%2Bq8xPMyMp9UV8eRdqKn7Z69OLbQByr5S9ulJ%2FYOBf3VWVk5GjUOSelXzesT4EnR3zaCiMvWHdqFUss6XJ1gtucGVQxGukpBwQjcdMPK8SLx9uqfljhSjhMU1kxDRF%2FEUHzB3KV56wYSMLcInoGp2S6XFdi%2FfdCuFfDqFruEqIE0B1M%2Fy3M39U6Cm8fYYN642eYG6q4EyHR5j%2FqWAionJ8uabR%2BBjIsdBJJyWnsmSLV23L%2B3L19TWsJQvJvJqEhQY5gTiNomCPpiFdJJxQaPvFSedewLcl1R6Ges1wx0AF2nrTZ4yjsNHqK9U6pTrcHVH086CXbWTmF3Y9lXdB1KZTm2ADPFo3aTtC6cY03E3odxINyY%2FpvDhcJ9a31Sf%2F4H%2Ba8JZAJ9FUYM9HxOwNcSU9k6ZMarrr%2FHckVk0GfaeFLgEomb%2B7xT%2F5TshPuv2lBoIPiK5%2F21NfWlnirivRndEQ2FAUnCioDnGZjy2AaJU4EFK65%2Fiyvg%2FghC2YL7lTwI5yK7Thp54B37A864dmT2VjvZf0hLxNvoyVkDZTwf8v3DILf2lQLq80ihdKVklGcUKglKwCLGhw14eRQNWDROfBNf%2BkBYUhDcV62%2B56UpL0lpdSYymzbQBN0RFnPrQFw6Ay74FhZNh3Tr%2BdlQX0ufHcWJmM1w3Mv6dApW8rz5XkcFqjrXA5%2F1QwXQl1rzNeG1BnntOlaBueDiSCsWT%2F8NLYuHh7F1ry97rEmFiB%2B%2BrIIqeTgZoinnPbqvy%2BIPGN%2BIMNy%2FtSIQZ%2FPQl7KlxTd75kVL%2BzDhkJmqtLVCY7HHzel9TfcDCyLPaO7uQQ9xI4ZPqHgUEz8NJY7rZ%2BLAEt5sahQKxeYoIlA%3D%3D

  • Sample

    240105-zevt8abde9

Malware Config

Targets

    • Target

      https://62777ab2890.pages.dev/?309b4092200cdd66bf8b39f0f3b1a6a2lr0seuuj=U2FsdGVkX1%2FA7vAasds05%2F5%2F8Lh7pWDSPDb%2BFrowzK8ecIWHAZgDDhA0iSHM1Dw3HHNgssuEtY7HcXHrn5%2Bxw9JnyPPDTTazz%2FLjFtpbl6a6zDkQJolzaP1asqSs1xRi3egTG6Jcjg1GKks3tgpGEyYS%2Fhn0zSW8FKdPVaKtuvpmTKQ1i%2Fbd%2BpGDLYFvknjpD6Xts9JopveY9jvDVUSWjHGnzsZ3JU9THQkEZPrGHi7LhszVXAgMAoLFhNK%2FgFTwuBIG7QHdP2MLIIheHXWgLh9%2BBTZeb5LnHhJSRvVYxWCjJ2JcjVdyxGG1CvbXkTNNhOqkwS3mLxA9tfg7fofbNQdcmVAMSB8wXSnjrOHdYeGrsD1mqZEzacqpAevZsUeLoH0XrBvzz9nFJ8WAiVbheGOq01j%2BYnR2%2BAul96%2FrxH46cTNwdsuY3pUBwSD4ZS2xJvDRkCRF%2BlLXbmkDBgdju0q6m3RMYfFrdkaveKKDJmoJxkB6l26uzgOaHUQhyit6xGhQ9PyfK3LDKrZcD%2F%2BhQs%2B1mCYM%2F8mH5OYSTBolUlMDb7TfR%2F4fnZGD913Jq%2BU0CWXTvixBipzieDuFQOug5FJjB%2FIiULyEXezzFgsOpB1xV2RFZK65o%2FpdbxQ9in3Lfr5QK%2Fiy6XKIuskR6II7v1zEicYdIuB0p3i2V2WXcHWnt5LzvK3nhpkSRyLVWTkrpYXj849vRbBzaYWnBjlBqCQ2tj8YfIk4xPazS%2FEtrhGj129IP6kryY0C%2Bq8xPMyMp9UV8eRdqKn7Z69OLbQByr5S9ulJ%2FYOBf3VWVk5GjUOSelXzesT4EnR3zaCiMvWHdqFUss6XJ1gtucGVQxGukpBwQjcdMPK8SLx9uqfljhSjhMU1kxDRF%2FEUHzB3KV56wYSMLcInoGp2S6XFdi%2FfdCuFfDqFruEqIE0B1M%2Fy3M39U6Cm8fYYN642eYG6q4EyHR5j%2FqWAionJ8uabR%2BBjIsdBJJyWnsmSLV23L%2B3L19TWsJQvJvJqEhQY5gTiNomCPpiFdJJxQaPvFSedewLcl1R6Ges1wx0AF2nrTZ4yjsNHqK9U6pTrcHVH086CXbWTmF3Y9lXdB1KZTm2ADPFo3aTtC6cY03E3odxINyY%2FpvDhcJ9a31Sf%2F4H%2Ba8JZAJ9FUYM9HxOwNcSU9k6ZMarrr%2FHckVk0GfaeFLgEomb%2B7xT%2F5TshPuv2lBoIPiK5%2F21NfWlnirivRndEQ2FAUnCioDnGZjy2AaJU4EFK65%2Fiyvg%2FghC2YL7lTwI5yK7Thp54B37A864dmT2VjvZf0hLxNvoyVkDZTwf8v3DILf2lQLq80ihdKVklGcUKglKwCLGhw14eRQNWDROfBNf%2BkBYUhDcV62%2B56UpL0lpdSYymzbQBN0RFnPrQFw6Ay74FhZNh3Tr%2BdlQX0ufHcWJmM1w3Mv6dApW8rz5XkcFqjrXA5%2F1QwXQl1rzNeG1BnntOlaBueDiSCsWT%2F8NLYuHh7F1ry97rEmFiB%2B%2BrIIqeTgZoinnPbqvy%2BIPGN%2BIMNy%2FtSIQZ%2FPQl7KlxTd75kVL%2BzDhkJmqtLVCY7HHzel9TfcDCyLPaO7uQQ9xI4ZPqHgUEz8NJY7rZ%2BLAEt5sahQKxeYoIlA%3D%3D

    Score
    6/10
    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Matrix ATT&CK v13

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks