General

  • Target

    http://google.com

  • Sample

    250106-ttl8qstkbl

Malware Config

Targets

    • Target

      http://google.com

    • A potential corporate email address has been identified in the URL: 67C716D751E567F70A490D4C@AdobeOrg

    • Mark of the Web detected: This indicates that the page was originally saved or cloned.

    • Detected potential entity reuse from brand MICROSOFT.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks