General

  • Target

    https://mcrane.jp/?wptouch_switch=desktop&redirect=https://www.rxjapan.jp/?wptouch_switch=desktop&redirect=https://d3e4nq95emgxkh.cloudfront.net%23qD~fbXVrdW5kLnBhdGlsQGJyLWF1dG9tYXRpb24uY29t

  • Sample

    240913-n86ysszgkl

Malware Config

Targets

    • Target

      https://mcrane.jp/?wptouch_switch=desktop&redirect=https://www.rxjapan.jp/?wptouch_switch=desktop&redirect=https://d3e4nq95emgxkh.cloudfront.net%23qD~fbXVrdW5kLnBhdGlsQGJyLWF1dG9tYXRpb24uY29t

    • Legitimate hosting services abused for malware hosting/C2

    • Detected potential entity reuse from brand microsoft.

MITRE ATT&CK Enterprise v15

Tasks