General

  • Target

    https://landexpressusa-my.sharepoint.com/:f:/g/personal/securedocument_landexpress_org/ElPKT1WhIctAk-kwyAdVwB4BpQ-AUtHywySiVk3ntUqwzw?e=V9wwXa

  • Sample

    241122-17vkla1jft

Malware Config

Targets

    • Target

      https://landexpressusa-my.sharepoint.com/:f:/g/personal/securedocument_landexpress_org/ElPKT1WhIctAk-kwyAdVwB4BpQ-AUtHywySiVk3ntUqwzw?e=V9wwXa

    • A potential corporate email address has been identified in the URL: GetListUsingPathDecodedUrl@a1

    • Network Share Discovery

      Attempt to gather information on host network.

    • Detected potential entity reuse from brand MICROSOFT.

MITRE ATT&CK Enterprise v15

Tasks