Resubmissions

22-11-2024 04:33

241122-e6qz5azqhm 10

22-11-2024 04:28

241122-e3p9eszqcl 10

General

  • Target

    https://xinyuetech.en.alibaba.com/index.html?spm=a2700.shop_co.88.10.3eba7ae4zYThy3

  • Sample

    241122-e3p9eszqcl

Malware Config

Targets

    • Target

      https://xinyuetech.en.alibaba.com/index.html?spm=a2700.shop_co.88.10.3eba7ae4zYThy3

    • Detected alibaba phishing page

    • A potential corporate email address has been identified in the URL: wurlhttpsxinyuetech.en.alibaba.comindex.htmlwqueryspma2700.shopco.88.10.3eba7ae4zYThy3wrefwtitleCompanyOverviewShenzhenXinyueTechnologyCo.Ltd.uaMozilla5.0WindowsNT10.0Win64x64AppleWebKit537.36KHTMLlikeGeckoChrome123.0.0.0Safari537.36referrerdspdpi1dspw1280dsph720netwreshttpss.alicdn.com@xconfigicbupluginscriptconfigdatawparamwmethodGETwrc200wrt238whdnullwrshdcachecontrolmaxage180contentlength240contenttypeapplicationjsonfwip2.22.138.61lastmodifiedTue13Aug2024085135GMTmsgwbodywrespcategory2sampleRate1wtype17wbid1rzf0qwphlppmnjlwcidnullwrel5.38h5wspafalsewtm1732249934561wcnt1uidd8d875ec1ecb4d22056970d4bc2a5cdftypeapisdkver1.2.7logsrcjssdkucparamwidd8d875ec1ecb4d22056970d4bc2a5cdfwfrmide0b6dc02261443e82068f0c7cf706d59wsendmodesendbeacon

MITRE ATT&CK Enterprise v15

Tasks