General

  • Target

    https://www.hemdomblog.com/2022/09/shiro-no-yakata.html

  • Sample

    240811-wv7bea1ejj

Malware Config

Targets

    • Target

      https://www.hemdomblog.com/2022/09/shiro-no-yakata.html

    • Legitimate hosting services abused for malware hosting/C2

    • Mark of the Web detected: This indicates that the page was originally saved or cloned.

MITRE ATT&CK Enterprise v15

Tasks