General

  • Target

    https://hebesmart.com/plugins/red.html?email=peter.griffin114fg%40saic.com%0D

  • Sample

    240428-q5r2ksha77

Malware Config

Targets

    • Target

      https://hebesmart.com/plugins/red.html?email=peter.griffin114fg%40saic.com%0D

    Score
    6/10
    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Matrix ATT&CK v13

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Command and Control

Web Service

1
T1102

Tasks