General

  • Target

    https://xinyuetech.en.alibaba.com/index.html?spm=a2700.shop_co.88.10.3eba7ae4zYThy3

  • Sample

    241122-faywjazrdp

Malware Config

Targets

    • Target

      https://xinyuetech.en.alibaba.com/index.html?spm=a2700.shop_co.88.10.3eba7ae4zYThy3

    • Detected alibaba phishing page

    • A potential corporate email address has been identified in the URL: videoId=null&scene=shopVideoPlayer&videoUrl=&playsid=e0f78cc9-4167-4c2d-a626-4bfe599cd779&preload=undefined&autoplay=true&doveType=1&playerName=@alife/react-dove&playerVerison=1.3.10&progress=0&volume=0&action=volumechange&is_visible=1&ali_track=-&lang_cookie=-&st_page_id=b5d7b0532101d4d81732250499&flasher_group=normal&local_ab_params=%7B%22phantBucketName%22%3A%22speed_concurrent%2Cshow_map%2Cnew_render_module%2Cuse_new_video_player%2Cpc_new_sort%2Cshow_tag_video%22%2C%22perf_group%22%3A%22%22%7D&web_umid=OV5qya0byHXLT3IUHEv534fZyAXFndBNVipSEjwkNE2S3XINzpF9D1srufxBplxeO&jsver=aplus_std&lver=8.15.24&pver=0.7.12&cache=ff1f7a&page_cna=XPnGH16NUGUCAS/2gNaBxiHt&_slog=0

MITRE ATT&CK Enterprise v15

Tasks