General

  • Target
    https://storage.googleapis.com/herokudns/cloud.html#hegvwzoblosed.html/?6f.64.3d.31.73.79.70.36.61.34.32.61.64.36.31.31.32.62.62.38.5f.76.6c.5f.66.72.65.73.68.76.6c.5f.31.36.35.34.2e.32.75.69.70.62.63.6f.2e.53.30.30.6d.64.72.6a.79.63.74.37.32.74.36.30.30.34.79.5f.78.31.31.35.31.37.2e.6a.79.63.74.37NDlzMXoxLTMwMDdqdmI=3b1cjP
  • Sample260701-bbfdcsdv8t
Score
7/10

Malware Config

Targets

    • Target
      https://storage.googleapis.com/herokudns/cloud.html#hegvwzoblosed.html/?6f.64.3d.31.73.79.70.36.61.34.32.61.64.36.31.31.32.62.62.38.5f.76.6c.5f.66.72.65.73.68.76.6c.5f.31.36.35.34.2e.32.75.69.70.62.63.6f.2e.53.30.30.6d.64.72.6a.79.63.74.37.32.74.36.30.30.34.79.5f.78.31.31.35.31.37.2e.6a.79.63.74.37NDlzMXoxLTMwMDdqdmI=3b1cjP
    Score
    7/10
    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

MITRE ATT&CK Enterprise v16

Tasks