General

  • Target

    https://sinfonyeu-my.sharepoint.com/:b:/g/personal/guillaume_rocca_sinfony_eu/EZroWMrEa2tEtX7P1qpSDwIB6VEz_Y6y5dhGfngzNRFCHg?e=4%3azBaAep&at=9&xsdata=MDV8MDJ8U2FudG9zaC5LaGV0YWdvdWRhckB1Y2IuY29tfGZkYjc3MzZmYTNkMTQwNDFmODFiMDhkZDA4YTJmZGY1fDIzNzU4MmFkM2VhYjRkNDQ4Njg4MDZjYTlmMmU2MTNifDB8MHw2Mzg2NzYyMTgzMzM0ODgwMjl8VW5rbm93bnxUV0ZwYkdac2IzZDhleUpGYlhCMGVVMWhjR2tpT25SeWRXVXNJbFlpT2lJd0xqQXVNREF3TUNJc0lsQWlPaUpYYVc0ek1pSXNJa0ZPSWpvaVRXRnBiQ0lzSWxkVUlqb3lmUT09fDB8fHw%3d&sdata=alBvRktPUkNmVFp2QXRGeU0zL1diZWN1aFhKUjNsanJ5dzB3eDlXYUd4OD0%3d

  • Sample

    241119-rhphlswqdy

Score
8/10

Malware Config

Targets

    • Target

      https://sinfonyeu-my.sharepoint.com/:b:/g/personal/guillaume_rocca_sinfony_eu/EZroWMrEa2tEtX7P1qpSDwIB6VEz_Y6y5dhGfngzNRFCHg?e=4%3azBaAep&at=9&xsdata=MDV8MDJ8U2FudG9zaC5LaGV0YWdvdWRhckB1Y2IuY29tfGZkYjc3MzZmYTNkMTQwNDFmODFiMDhkZDA4YTJmZGY1fDIzNzU4MmFkM2VhYjRkNDQ4Njg4MDZjYTlmMmU2MTNifDB8MHw2Mzg2NzYyMTgzMzM0ODgwMjl8VW5rbm93bnxUV0ZwYkdac2IzZDhleUpGYlhCMGVVMWhjR2tpT25SeWRXVXNJbFlpT2lJd0xqQXVNREF3TUNJc0lsQWlPaUpYYVc0ek1pSXNJa0ZPSWpvaVRXRnBiQ0lzSWxkVUlqb3lmUT09fDB8fHw%3d&sdata=alBvRktPUkNmVFp2QXRGeU0zL1diZWN1aFhKUjNsanJ5dzB3eDlXYUd4OD0%3d

    Score
    7/10
    • A potential corporate email address has been identified in the URL: 05|02|[email protected]|fdb7736fa3d14041f81b08dd08a2fdf5|237582ad3eab4d44868806ca9f2e613b|0|0|638676218333488029|Unknown|TWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ==|0|||

MITRE ATT&CK Enterprise v15

Tasks