General

  • Target

    https://drive.google.com/file/d/1WKy_Fzp9NKGTRgkLgLjHKiulJg1ObSYh/view

  • Sample

    241117-yskezaxdrb

Score
10/10

Malware Config

Extracted

Credentials

  • Protocol:
    smtp
  • Host:
    smtp.gmail.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    rpzx kifd pxzt tvhj

Targets

    • Target

      https://drive.google.com/file/d/1WKy_Fzp9NKGTRgkLgLjHKiulJg1ObSYh/view

    Score
    10/10
    • Downloads MZ/PE file

    • Executes dropped EXE

    • Drops desktop.ini file(s)

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks