General

  • Target

    https://us-west-2.protection.sophos.com/?d=vercel.app&u=aHR0cHM6Ly9ldGl2LXRjYWVyLnZlcmNlbC5hcHA=&i=NWVjYjQ2MzZmNTgwNWIwZWJlZWZkM2Fl&t=OTVPMGtUcXk5NXhLUVNlYmR1amZjSTRudXlDT0crZVlTVkZlenlQRGdwOD0=&h=af4faa1f507546608c8d2367ff405a59&s=AVNPUEhUT0NFTkNSWVBUSVaefErLK28bWot2BtXhDsDphWNaci1tRbkInJTVTCRlcQ#ZXhhbXBsZUBvdXRsb29rLmNvbQ==

  • Sample

    241120-lrrrfawamj

Malware Config

Targets

    • Target

      https://us-west-2.protection.sophos.com/?d=vercel.app&u=aHR0cHM6Ly9ldGl2LXRjYWVyLnZlcmNlbC5hcHA=&i=NWVjYjQ2MzZmNTgwNWIwZWJlZWZkM2Fl&t=OTVPMGtUcXk5NXhLUVNlYmR1amZjSTRudXlDT0crZVlTVkZlenlQRGdwOD0=&h=af4faa1f507546608c8d2367ff405a59&s=AVNPUEhUT0NFTkNSWVBUSVaefErLK28bWot2BtXhDsDphWNaci1tRbkInJTVTCRlcQ#ZXhhbXBsZUBvdXRsb29rLmNvbQ==

    Score
    6/10
    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks