General

  • Target
    https://t.co/Qxopcb4dfE
  • Sample260718-ccqq6ags81

Malware Config

Targets

    • Target
      https://t.co/Qxopcb4dfE
    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Downloads MZ/PE file

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v16

Tasks