General

  • Target

    http://gndbg.com/logon/index.xml#?email=dGhpc21lbWV5b3VAd2VtYWtleW91d2Vhay5jb20=

  • Sample

    250113-v638fs1lfw

Score
10/10

Malware Config

Targets

    • Target

      http://gndbg.com/logon/index.xml#?email=dGhpc21lbWV5b3VAd2VtYWtleW91d2Vhay5jb20=

    Score
    7/10
    • A potential corporate email address has been identified in the URL: [email protected]

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks