General

  • Target

    https://drive.google.com/uc?export=viewonlinedocu=d&id=1E51sz2ci3WRZZjUkxYgrNbygHEKi-aWX&data=05|02|[email protected]|26a2237267b448e2506608dcfcf4dfa9|66f6821e0a304a068b8b901bbfd2bc60|0|0|638663375923112256|Unknown|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0=|20000|||&sdata=pECSKmGmHKF/6/SX9zf/qrVLaW1haLlHmdb5MiX7k8c=&reserved=0

  • Sample

    241105-yq66yswrhx

Malware Config

Targets

    • Target

      https://drive.google.com/uc?export=viewonlinedocu=d&id=1E51sz2ci3WRZZjUkxYgrNbygHEKi-aWX&data=05|02|[email protected]|26a2237267b448e2506608dcfcf4dfa9|66f6821e0a304a068b8b901bbfd2bc60|0|0|638663375923112256|Unknown|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0=|20000|||&sdata=pECSKmGmHKF/6/SX9zf/qrVLaW1haLlHmdb5MiX7k8c=&reserved=0

    • A potential corporate email address has been identified in the URL: 05|02|[email protected]|26a2237267b448e2506608dcfcf4dfa9|66f6821e0a304a068b8b901bbfd2bc60|0|0|638663375923112256|Unknown|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0=|20000|||

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks