General

  • Target

    https://rcnw190.sharefile.com/public/share/web-sb6b13673b8ef4d58bee29087dbc44d6a

  • Sample

    241121-3b2p5szpax

Malware Config

Targets

    • Target

      https://rcnw190.sharefile.com/public/share/web-sb6b13673b8ef4d58bee29087dbc44d6a

    • Legitimate website abused for phishing

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Detected potential entity reuse from brand MICROSOFT.

MITRE ATT&CK Enterprise v15

Tasks