General

  • Target

    https://cloudflare-ipfs.com/ipfs/bafybeifyzhdqjgtj7qutq3ajrjdcfzov3dbc4kzhe7u2r6ox4zgbdjt2om/?openboxmailer/auto/eMail.web/987FTmail.authenticate/checking_auth0/authenticate-userid/84778949884903948993839/#reembolso.pme@lockton.com

  • Sample

    240416-q7xpvabf79

Score
10/10

Malware Config

Targets

    • Target

      https://cloudflare-ipfs.com/ipfs/bafybeifyzhdqjgtj7qutq3ajrjdcfzov3dbc4kzhe7u2r6ox4zgbdjt2om/?openboxmailer/auto/eMail.web/987FTmail.authenticate/checking_auth0/authenticate-userid/84778949884903948993839/#reembolso.pme@lockton.com

    Score
    6/10
    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Matrix ATT&CK v13

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Command and Control

Web Service

1
T1102

Tasks