General

  • Target

    https://medicasegroup18-my.sharepoint.com/:f:/g/personal/rivka_medicasegroup_com/EtxMAiLpGzlGt0PuRYovgwwBg9LQKUMwIPSEjrUebSIjlg?e=gFYAs9

  • Sample

    241120-rzl4tayjhx

Malware Config

Targets

    • Target

      https://medicasegroup18-my.sharepoint.com/:f:/g/personal/rivka_medicasegroup_com/EtxMAiLpGzlGt0PuRYovgwwBg9LQKUMwIPSEjrUebSIjlg?e=gFYAs9

    • A potential corporate email address has been identified in the URL: GetListUsingPathDecodedUrl@a1

    • Network Share Discovery

      Attempt to gather information on host network.

    • Detected potential entity reuse from brand MICROSOFT.

MITRE ATT&CK Enterprise v15

Tasks