General

  • Target

    https://securepubads.g.doubleclick.net/pcs/view?adurl=http%3A%2F%2Fjintelligence.cc/444843YXBzX2NvbGxlY3Rpb25zQGFjYWNvbXBsaWFuY2Vncm91cC5jb20=BWLXNGWD

  • Sample

    250414-rnzwjaymy4

Malware Config

Targets

    • Target

      https://securepubads.g.doubleclick.net/pcs/view?adurl=http%3A%2F%2Fjintelligence.cc/444843YXBzX2NvbGxlY3Rpb25zQGFjYWNvbXBsaWFuY2Vncm91cC5jb20=BWLXNGWD

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Network Share Discovery

      Attempt to gather information on host network.

    • Detected potential entity reuse from brand MICROSOFT.

MITRE ATT&CK Enterprise v16

Tasks