General
-
Target
https://www.paypal.com/invoice/payerView/details/INV2-FCET-3STX-R97X-H99Z?locale.x=en_US&v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000238&utm_unptid=f83da144-a10d-11ef-bd32-a94c5f14986c&ppid=RT000238&cnac=US&rsta=en_US*28en-US*29&unptid=f83da144-a10d-11ef-bd32-a94c5f14986c&calc=f5085022dc3b5&unp_tpcid=invoice-buyer-notification&page=main*3Aemail*3ART000238&pgrp=main*3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.292.0&tenant_name=&xt=145585*2C134645*2C150948*2C104038&link_ref=details_inv2-fcet-3stx-r97x-h99z__;JSUlJSUlJSU!!P5FZM7ryyeY!XF6eGWLYiz7xn4D9Y9_EJHBQe2ebgRWibqB0TGUBL94byOy7CD9-NPHnm6GNBT1Ce9Vt2mk5MbYS9AnqfTwS$
-
Sample
241115-vdnx3axjd1
Malware Config
Targets
-
-
Target
https://www.paypal.com/invoice/payerView/details/INV2-FCET-3STX-R97X-H99Z?locale.x=en_US&v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000238&utm_unptid=f83da144-a10d-11ef-bd32-a94c5f14986c&ppid=RT000238&cnac=US&rsta=en_US*28en-US*29&unptid=f83da144-a10d-11ef-bd32-a94c5f14986c&calc=f5085022dc3b5&unp_tpcid=invoice-buyer-notification&page=main*3Aemail*3ART000238&pgrp=main*3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.292.0&tenant_name=&xt=145585*2C134645*2C150948*2C104038&link_ref=details_inv2-fcet-3stx-r97x-h99z__;JSUlJSUlJSU!!P5FZM7ryyeY!XF6eGWLYiz7xn4D9Y9_EJHBQe2ebgRWibqB0TGUBL94byOy7CD9-NPHnm6GNBT1Ce9Vt2mk5MbYS9AnqfTwS$
Score6/10-
Network Share Discovery
Attempt to gather information on host network.
-
Detected potential entity reuse from brand PAYPAL.
-