General

  • Target
    https://www.google.com/search?q=googl&rlz=1CAXXPU_enUS1073&oq=googl&gs_lcrp=EgZjaHJvbWUyBggAEEUYOTIGCAEQRRg8MgYIAhBFGDsyBggDEEUYOzIGCAQQRRg8MgYIBRBFGDwyBggGEEUYPNIBCDMwMTBqMGo3qAIAsAIA&sourceid=chrome&ie=UTF-8&safe=active&ssui=on
  • Sample241021-n8hk7sshpc

Malware Config

Targets

    • Target
      https://www.google.com/search?q=googl&rlz=1CAXXPU_enUS1073&oq=googl&gs_lcrp=EgZjaHJvbWUyBggAEEUYOTIGCAEQRRg8MgYIAhBFGDsyBggDEEUYOzIGCAQQRRg8MgYIBRBFGDwyBggGEEUYPNIBCDMwMTBqMGo3qAIAsAIA&sourceid=chrome&ie=UTF-8&safe=active&ssui=on
    • Detected google phishing page

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks