General

  • Target

    https://www.ecobill.net/ticketing/api/attchs/v1/mail/Bearer eyJhbGciOiJIUzI1NiJ9.eyJqdGkiOiIyODc0NjgzIiwiaWF0IjoxNzE1OTQxMDg3LCJzdWIiOiJhdHQiLCJpc3MiOiJIb3RlbGJlZHMiLCJtYXAiOnsibWVzc2FnZUlkIjo4MDkxMzIxLCJib0lkIjoyODc0NjgzLCJmaWxlbmFtZSI6ImF0dGFjaG1lbnRzX21zZ184MDkxMzIxLnppcCJ9fQ.si--RVeeI0ZlJQz5rWJ7GOklL_7-nAa4fpn30af6y_4/

  • Sample

    240521-r2qvsahd59

Score
5/10

Malware Config

Targets

    • Target

      https://www.ecobill.net/ticketing/api/attchs/v1/mail/Bearer eyJhbGciOiJIUzI1NiJ9.eyJqdGkiOiIyODc0NjgzIiwiaWF0IjoxNzE1OTQxMDg3LCJzdWIiOiJhdHQiLCJpc3MiOiJIb3RlbGJlZHMiLCJtYXAiOnsibWVzc2FnZUlkIjo4MDkxMzIxLCJib0lkIjoyODc0NjgzLCJmaWxlbmFtZSI6ImF0dGFjaG1lbnRzX21zZ184MDkxMzIxLnppcCJ9fQ.si--RVeeI0ZlJQz5rWJ7GOklL_7-nAa4fpn30af6y_4/

    Score
    5/10
    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks