General

  • Target

    https://xinyuetech.en.alibaba.com/index.html?spm=a2700.shop_co.88.10.3eba7ae4zYThy3

  • Sample

    241122-e9jefsvkas

Malware Config

Targets

    • Target

      https://xinyuetech.en.alibaba.com/index.html?spm=a2700.shop_co.88.10.3eba7ae4zYThy3

    • Detected alibaba phishing page

    • A potential corporate email address has been identified in the URL: wurlhttpsxinyuetech.en.alibaba.comindex.htmlwqueryspma2700.shopco.88.10.3eba7ae4zYThy3wrefwtitleCompanyOverviewShenzhenXinyueTechnologyCo.Ltd.uaMozilla5.0WindowsNT10.0Win64x64AppleWebKit537.36KHTMLlikeGeckoChrome123.0.0.0Safari537.36referrerdspdpi1dspw1280dsph720netwreshttpss.alicdn.com@xconfigicbupluginscriptconfigdatawparamwmethodGETwrc200wrt796whdnullwrshdcachecontrolmaxage180contentlength241contenttypeapplicationjsonfwip23.49.27.74lastmodifiedTue13Aug2024085135GMTmsgwbodywrespcategory2sampleRate1wtype17wbid1rzf0qwphlppmnjlwcidnullwrel5.38h5wspafalsewtm1732283049128wcnt1uid620cd12072bd4e4233d9613851f419betypeapisdkver1.2.7logsrcjssdkucparamwid620cd12072bd4e4233d9613851f419bewfrmid135d4890b04f4fec2d582315b9337a19wsendmodesendbeacon

MITRE ATT&CK Enterprise v15

Tasks