General

  • Target

    https://theoggroup-my.sharepoint.com/:u:/g/personal/rohit_theoggroup_co/EW1S6u7eBPZAkl8sn76CFW4B9_fhjfgaN299JnYAgaQ9MQ?e=CXhREy&xsdata=MDV8MDJ8ai5jLnp3YXJ0c0BhbXN0ZXJkYW11bWMubmx8ODQyOTRhODMzNGFhNDQ3YTQ5OTMwOGRkMGQ4OTdhYzJ8NjhkZmFiMWExMWJiNGNjNmJlYjUyOGQ3NTY5ODRmYjZ8MHwwfDYzODY4MTYwNjMxNDY2OTU4MnxVbmtub3dufFRXRnBiR1pzYjNkOGV5SkZiWEIwZVUxaGNHa2lPblJ5ZFdVc0lsWWlPaUl3TGpBdU1EQXdNQ0lzSWxBaU9pSlhhVzR6TWlJc0lrRk9Jam9pVFdGcGJDSXNJbGRVSWpveWZRPT18MHx8fA%3d%3d&sdata=UjZleTdFdHRocVZkVTFPMUEwSzV2WWtVSHBRQ093dWg1YitWbWh2WExoRT0%3d

  • Sample

    241125-yv3dkazrgr

Malware Config

Targets

    • Target

      https://theoggroup-my.sharepoint.com/:u:/g/personal/rohit_theoggroup_co/EW1S6u7eBPZAkl8sn76CFW4B9_fhjfgaN299JnYAgaQ9MQ?e=CXhREy&xsdata=MDV8MDJ8ai5jLnp3YXJ0c0BhbXN0ZXJkYW11bWMubmx8ODQyOTRhODMzNGFhNDQ3YTQ5OTMwOGRkMGQ4OTdhYzJ8NjhkZmFiMWExMWJiNGNjNmJlYjUyOGQ3NTY5ODRmYjZ8MHwwfDYzODY4MTYwNjMxNDY2OTU4MnxVbmtub3dufFRXRnBiR1pzYjNkOGV5SkZiWEIwZVUxaGNHa2lPblJ5ZFdVc0lsWWlPaUl3TGpBdU1EQXdNQ0lzSWxBaU9pSlhhVzR6TWlJc0lrRk9Jam9pVFdGcGJDSXNJbGRVSWpveWZRPT18MHx8fA%3d%3d&sdata=UjZleTdFdHRocVZkVTFPMUEwSzV2WWtVSHBRQ093dWg1YitWbWh2WExoRT0%3d

    • A potential corporate email address has been identified in the URL: 05|02|[email protected]|84294a8334aa447a499308dd0d897ac2|68dfab1a11bb4cc6beb528d756984fb6|0|0|638681606314669582|Unknown|TWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ==|0|||

    • Detected potential entity reuse from brand MICROSOFT.

MITRE ATT&CK Enterprise v15

Tasks