General

  • Target

    https://l4ab.adj.st/tickets/8PIX07ITNLK3OMEWAEM0JHUMU1T20G8H?adj_t=wdf1nl7_5okum7y&adj_deeplink=gyg://tickets/8PIX07ITNLK3OMEWAEM0JHUMU1T20G8H?visitor_id=QGJ2EERRC7F467R11M1AUBTGTMSQIPDM&utm_source=getyourguide&utm_medium=email_transactional&utm_campaign=email_customer_pre_trip_v2&utm_content=voucher_welcome_bundle&adj_campaign=email_customer_pre_trip_v2&adj_adgroup=voucher_welcome_bundle&adj_creative&adj_fallback=https://festadapitanga.com.br/image/g63xx/V9UJwyOxKbZg64320320293/[email protected]

  • Sample

    240530-xd5lxshd25

Malware Config

Targets

    • Target

      https://l4ab.adj.st/tickets/8PIX07ITNLK3OMEWAEM0JHUMU1T20G8H?adj_t=wdf1nl7_5okum7y&adj_deeplink=gyg://tickets/8PIX07ITNLK3OMEWAEM0JHUMU1T20G8H?visitor_id=QGJ2EERRC7F467R11M1AUBTGTMSQIPDM&utm_source=getyourguide&utm_medium=email_transactional&utm_campaign=email_customer_pre_trip_v2&utm_content=voucher_welcome_bundle&adj_campaign=email_customer_pre_trip_v2&adj_adgroup=voucher_welcome_bundle&adj_creative&adj_fallback=https://festadapitanga.com.br/image/g63xx/V9UJwyOxKbZg64320320293/[email protected]

    Score
    6/10
    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Matrix ATT&CK v13

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Command and Control

Web Service

1
T1102

Tasks