Resubmissions

02/07/2026, 09:44

260702-lqv3gafv8s10

02/07/2026, 09:40

260702-lm7bbsdx5m10

General

  • Target
    https://gallofreadministracio-my.sharepoint.com/:o:/g/personal/ricard_homet_gallofre_com/IgCxmKUp41aGT7Qjvy3dj3Z5AdiofweeZn45L4vEOix1GU8?e=ceTUOH
  • Sample260702-lm7bbsdx5m

Malware Config

Targets

    • Target
      https://gallofreadministracio-my.sharepoint.com/:o:/g/personal/ricard_homet_gallofre_com/IgCxmKUp41aGT7Qjvy3dj3Z5AdiofweeZn45L4vEOix1GU8?e=ceTUOH
    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Detected potential entity reuse from brand MICROSOFT.

MITRE ATT&CK Enterprise v16

Tasks