General
Static task
static1
URLScan task
urlscan1
Malware Config
Targets
-
-
Target
https://app.powerbi.com/view?r=eyJrIjoiMDM5MDRmOTEtNzMxMi00NzA1LTk1OGUtMWIyNjU1YzI0MzIwIiwidCI6IjJkMTNkMGU4LTI1YjgtNDE2Yi04YzQ1LTVkZDU4MDgzYmVjZCJ9
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Drops file in System32 directory
-