General

  • Target
    https://s3.eu-west-1.amazonaws.com/shared.vppositionzoomcalls2.43/oppositesactionmtab39293.htm
  • Sample240819-ptbd1sthpc

Malware Config

Targets

    • Target
      https://s3.eu-west-1.amazonaws.com/shared.vppositionzoomcalls2.43/oppositesactionmtab39293.htm
    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Detected potential entity reuse from brand microsoft.

MITRE ATT&CK Enterprise v15

Tasks