General

  • Target

    https://www.paypal.com/invoice/payerView/details/INV2-GRFX-JRKF-6C2G-R9ZC?locale.x=en_US&action=report-spam&v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000238&utm_unptid=c9f9b31d-d286-11ef-9e52-d13b1f20d6de&ppid=RT000238&cnac=US&rsta=en_US%28en-US%29&unptid=c9f9b31d-d286-11ef-9e52-d13b1f20d6de&calc=59b6b64fdf600&unp_tpcid=invoice-buyer-notification&page=main%3Aemail%3ART000238&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.299.0&tenant_name=&xt=145585%2C134645%2C150948%2C104038&link_ref=details_inv2-grfx-jrkf-6c2g-r9zc

  • Sample

    250114-3k3zkavpgj

Malware Config

Targets

    • Target

      https://www.paypal.com/invoice/payerView/details/INV2-GRFX-JRKF-6C2G-R9ZC?locale.x=en_US&action=report-spam&v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000238&utm_unptid=c9f9b31d-d286-11ef-9e52-d13b1f20d6de&ppid=RT000238&cnac=US&rsta=en_US%28en-US%29&unptid=c9f9b31d-d286-11ef-9e52-d13b1f20d6de&calc=59b6b64fdf600&unp_tpcid=invoice-buyer-notification&page=main%3Aemail%3ART000238&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.299.0&tenant_name=&xt=145585%2C134645%2C150948%2C104038&link_ref=details_inv2-grfx-jrkf-6c2g-r9zc

    • Network Share Discovery

      Attempt to gather information on host network.

    • Detected potential entity reuse from brand PAYPAL.

MITRE ATT&CK Enterprise v15

Tasks