General
-
Target
https://www.ecobill.net/ticketing/api/attchs/v1/mail/Bearer eyJhbGciOiJIUzI1NiJ9.eyJqdGkiOiIyODc0NjgzIiwiaWF0IjoxNzE1OTQxMDg3LCJzdWIiOiJhdHQiLCJpc3MiOiJIb3RlbGJlZHMiLCJtYXAiOnsibWVzc2FnZUlkIjo4MDkxMzIxLCJib0lkIjoyODc0NjgzLCJmaWxlbmFtZSI6ImF0dGFjaG1lbnRzX21zZ184MDkxMzIxLnppcCJ9fQ.si--RVeeI0ZlJQz5rWJ7GOklL_7-nAa4fpn30af6y_4/
-
Sample
240521-r2qvsahd59
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://www.ecobill.net/ticketing/api/attchs/v1/mail/Bearer eyJhbGciOiJIUzI1NiJ9.eyJqdGkiOiIyODc0NjgzIiwiaWF0IjoxNzE1OTQxMDg3LCJzdWIiOiJhdHQiLCJpc3MiOiJIb3RlbGJlZHMiLCJtYXAiOnsibWVzc2FnZUlkIjo4MDkxMzIxLCJib0lkIjoyODc0NjgzLCJmaWxlbmFtZSI6ImF0dGFjaG1lbnRzX21zZ184MDkxMzIxLnppcCJ9fQ.si--RVeeI0ZlJQz5rWJ7GOklL_7-nAa4fpn30af6y_4/
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
https://www.ecobill.net/ticketing/api/attchs/v1/mail/Bearer eyJhbGciOiJIUzI1NiJ9.eyJqdGkiOiIyODc0NjgzIiwiaWF0IjoxNzE1OTQxMDg3LCJzdWIiOiJhdHQiLCJpc3MiOiJIb3RlbGJlZHMiLCJtYXAiOnsibWVzc2FnZUlkIjo4MDkxMzIxLCJib0lkIjoyODc0NjgzLCJmaWxlbmFtZSI6ImF0dGFjaG1lbnRzX21zZ184MDkxMzIxLnppcCJ9fQ.si--RVeeI0ZlJQz5rWJ7GOklL_7-nAa4fpn30af6y_4/
Score5/10-
Drops file in System32 directory
-