Resubmissions

07/08/2024, 13:47

240807-q3n7xazalq6

07/08/2024, 13:06

240807-qcaxlasdpd6

07/08/2024, 13:01

240807-p89kcsygjq6

07/08/2024, 12:40

240807-pwdxxssckd6

07/08/2024, 12:34

240807-przzlasbre6

General

  • Target
    https://kfj5nknggr.wreollyane.tech/m/6d3c1a839b5a51a8a044be604150a111.htm
  • Sample240807-przzlasbre

Malware Config

Targets

    • Target
      https://kfj5nknggr.wreollyane.tech/m/6d3c1a839b5a51a8a044be604150a111.htm
    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Detected potential entity reuse from brand microsoft.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks