General

  • Target

    https://eu-west-1.protection.sophos.com/?d=d3security.com&u=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&i=NTM5NWQ3OTQwOTJlYzRkNzZhMDAwZjky&t=Z2szZllFWjBKNWNxK3FQV2FxUmJGYklZQ2JwcmNtWUlPRE04Sk5PZ1hjdz0=&h=0b081a54329140fdac31512f843a64ea&s=AVNPUEhUT0NFTkNSWVBUSVbbzLkvu5FxDsJfY_hHWY7dJxGJwIo2EIuIzZkYa_fGUR5YWbZxB4uoK1jRGGCAK9jjH_aWzLe9KUyibkMcWTbodHeEJcpnyyLwMTockgnjoYOKBjEX5mEy8cs6s0gEHRk

  • Sample

    241119-qgclzs1mhn

Score
7/10

Malware Config

Targets

    • Target

      https://eu-west-1.protection.sophos.com/?d=d3security.com&u=aHR0cHM6Ly9pbmZvLmQzc2VjdXJpdHkuY29tL2UzdC9DdGMvTFIrMTEzL2MxUHZaMDQvVlhqOThwM0cyV1ZGVzU1Qm5iQzZRS3QwVlZfZ01DMTVueWo1bU4zN0pxNVczcWd5VFc3WTgtUFQ2bFoza3pXNGZGWktGNHhDOG1GVzRmRjJoYzd5cUZSN1c4SmN0YkQxeDFzUjdXOWRWUm1SNnBkLTBITjNUX0JYUHBnYk5EVzgzUUxfYjFSY1Y5Z1c0cmJXeXA4bjZkNVNXMnRYLVhQMnlXdjIyVzRsZ1J4MjFManBWY1cxbkY4R0MzRkdMMVNXN2RtLVJzNkpuSkRKVzJmRjJxcTd0Z2ZUSFcxQjJLdng2VkdCR05XM3JHaGswN3NfWXJ6VzQ5WlFiSjd5eW5iOFZyckhGVDdRWU43UFc2TThfcXY0SEtaTTFOM0xkTXpER2R2Y3RXOWJRRllwMjM5eXlyVzNiM2xUdDYtanZuOVcyc04wU1c3ZENYcVlXMWpZSEI1NEJULUdkVzZLOHhwbjkyR3Izalc2RHFGRHgzMVgxX0xWNzVfRHM2ZzV2akpXNEZReGJiNFF2TGZQZjhzUTN0NjA0&i=NTM5NWQ3OTQwOTJlYzRkNzZhMDAwZjky&t=Z2szZllFWjBKNWNxK3FQV2FxUmJGYklZQ2JwcmNtWUlPRE04Sk5PZ1hjdz0=&h=0b081a54329140fdac31512f843a64ea&s=AVNPUEhUT0NFTkNSWVBUSVbbzLkvu5FxDsJfY_hHWY7dJxGJwIo2EIuIzZkYa_fGUR5YWbZxB4uoK1jRGGCAK9jjH_aWzLe9KUyibkMcWTbodHeEJcpnyyLwMTockgnjoYOKBjEX5mEy8cs6s0gEHRk

    Score
    7/10
    • A potential corporate email address has been identified in the URL: alpinejs@3

MITRE ATT&CK Enterprise v15

Tasks