General

  • Target
    http://audible.demdex.net/event?d_event=click&d_src=236090&d_emailopen=yes&d_campaign=568783160&d_rd=http%3A%2F%2Fwww.chinaboltingcloth.com/solutions/v3/
  • Sample260710-tssdcse171

Malware Config

Targets

    • Target
      http://audible.demdex.net/event?d_event=click&d_src=236090&d_emailopen=yes&d_campaign=568783160&d_rd=http%3A%2F%2Fwww.chinaboltingcloth.com/solutions/v3/
    • Drops desktop.ini file(s)

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v16

Tasks