General

  • Target

    https://files.multimc.org/downloads/mmc-develop-win32.zip

  • Sample

    241217-qfbnaszmey

Malware Config

Targets

    • Target

      https://files.multimc.org/downloads/mmc-develop-win32.zip

    • A potential corporate email address has been identified in the URL: F@ck_mp4

    • Legitimate hosting services abused for malware hosting/C2

    • Mark of the Web detected: This indicates that the page was originally saved or cloned.

    • Detected potential entity reuse from brand MICROSOFT.

    • Probable phishing domain

MITRE ATT&CK Enterprise v15

Tasks