General

  • Target

    https://e.customeriomail.com/e/c/eyJlbWFpbF9pZCI6ImRnU2pzUWtEQUk4VGpoTUJrY0lHOVAwWUFHMG5meGZpdXc1byIsImhyZWYiOiJodHRwczovL2RyaXZlLmdvb2dsZS5jb20vZmlsZS9kLzFQSU90cFV6WE8ya0tTWGxnRzQ0aUEtN09UbWtNY0JhRS92aWV3P3VzcD1zaGFyaW5nIiwiaW50ZXJuYWwiOiJhM2IxMDkwMDhlMTM4ZjEzIiwibGlua19pZCI6MzcxfQ/672882e4d1cfbbb1b9006025088e5f4d0e010a3fe36d2a78cf3e4747b48e965f

  • Sample

    240905-rn92hatbqd

Score
6/10

Malware Config

Targets

    • Target

      https://e.customeriomail.com/e/c/eyJlbWFpbF9pZCI6ImRnU2pzUWtEQUk4VGpoTUJrY0lHOVAwWUFHMG5meGZpdXc1byIsImhyZWYiOiJodHRwczovL2RyaXZlLmdvb2dsZS5jb20vZmlsZS9kLzFQSU90cFV6WE8ya0tTWGxnRzQ0aUEtN09UbWtNY0JhRS92aWV3P3VzcD1zaGFyaW5nIiwiaW50ZXJuYWwiOiJhM2IxMDkwMDhlMTM4ZjEzIiwibGlua19pZCI6MzcxfQ/672882e4d1cfbbb1b9006025088e5f4d0e010a3fe36d2a78cf3e4747b48e965f

    Score
    6/10
    • Legitimate hosting services abused for malware hosting/C2

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks