General

  • Target

    https://buildertrend.net/EmailLinkClicked.aspx?elt=112&key1=https%3A%2F%2Ft.co%2FkRISY7koJg&clickedUrl=https%3A%2F%2Ft.co%2FkRISY7koJg&urlText=food&builderID=fVR9xnmW4Mo&emailAddress=arkhom2529phutphan%40gmail.com&leadID=0fmIRc4iw7oeZyhi2_L31A&activityID=-SI8Y1FIhKQeZyhi2_L31A&entityLinkClickType=t4NlQyDoitc

  • Sample

    240426-21nzxaeg5z

Score
10/10

Malware Config

Targets

    • Target

      https://buildertrend.net/EmailLinkClicked.aspx?elt=112&key1=https%3A%2F%2Ft.co%2FkRISY7koJg&clickedUrl=https%3A%2F%2Ft.co%2FkRISY7koJg&urlText=food&builderID=fVR9xnmW4Mo&emailAddress=arkhom2529phutphan%40gmail.com&leadID=0fmIRc4iw7oeZyhi2_L31A&activityID=-SI8Y1FIhKQeZyhi2_L31A&entityLinkClickType=t4NlQyDoitc

    Score
    6/10
    • Legitimate hosting services abused for malware hosting/C2

    • Mark of the Web detected: This indicates that the page was originally saved or cloned.

MITRE ATT&CK Matrix ATT&CK v13

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Command and Control

Web Service

1
T1102

Tasks