General

  • Target
    https://s3.us-central-1.wasabisys.com/onedrive.live.com.login/mail.onedrive.attachment.delivery.htm?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=GRMYFMTFJS0B3VI3BN7L%2F20260623%2Fus-central-1%2Fs3%2Faws4_request&X-Amz-Date=20260623T131712Z&X-Amz-Expires=604800&X-Amz-Signature=0db6b5e462b5f270783790eebba0d1945e96a6cc8c7c1e5e11957ca44706ba4d&X-Amz-SignedHeaders=host
  • Sample260624-spb2jac15y
Score
6/10

Malware Config

Targets

    • Target
      https://s3.us-central-1.wasabisys.com/onedrive.live.com.login/mail.onedrive.attachment.delivery.htm?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=GRMYFMTFJS0B3VI3BN7L%2F20260623%2Fus-central-1%2Fs3%2Faws4_request&X-Amz-Date=20260623T131712Z&X-Amz-Expires=604800&X-Amz-Signature=0db6b5e462b5f270783790eebba0d1945e96a6cc8c7c1e5e11957ca44706ba4d&X-Amz-SignedHeaders=host
    Score
    6/10
    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v16

Tasks