General
- Target https://www.google.gg/url?q=amp/adservice.google.com.ph%252Fddm%252Fclk%252F424929466%253B226923624%253Br%253Bu%253Dds%2526amp%253Bsv1%253D64195420186%2526amp%253Bsv2%253D3261659123742877%2526amp%253Bsv3%253D6702577448695742699%2526amp%253Bgclid%253DEAIaIQobChMIurHiwbHn8gIVBZ53Ch2TZAIsEAQYASABEgKAL_D_BwE%253B%253F%252F%252Fpaseeinv.co.tz/.fe017393/D4O0b9#?79273293=cm9zcy5tY2dyZWdvckBkcmVzby5jb20=
- Sample260625-kctf2sat2w
Score
6/10
Malware Config
Targets
-
- Target https://www.google.gg/url?q=amp/adservice.google.com.ph%252Fddm%252Fclk%252F424929466%253B226923624%253Br%253Bu%253Dds%2526amp%253Bsv1%253D64195420186%2526amp%253Bsv2%253D3261659123742877%2526amp%253Bsv3%253D6702577448695742699%2526amp%253Bgclid%253DEAIaIQobChMIurHiwbHn8gIVBZ53Ch2TZAIsEAQYASABEgKAL_D_BwE%253B%253F%252F%252Fpaseeinv.co.tz/.fe017393/D4O0b9#?79273293=cm9zcy5tY2dyZWdvckBkcmVzby5jb20=
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Detected potential entity reuse from brand MICROSOFT.