General

  • Target
    https://secureemail.gs.com/formpostdir/securereader?id=MdD4St3yiUVTFbRqqRBozSAxMbTK0Qbh&brand=3ae2ebb861ee94e02&data=05|02|[email protected]|dff82ded22084699054508def4a2f162|10338048193a4298abea3596ae88b05e|0|0|639217178162131414|Unknown|TWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ==|0|||&sdata=siN/XoaR4FoDrIb32NZXiLaYL7TBRK+CBe06Vtwrv7g=&reserved=0
  • Sample260810-n63tcsgp7t

Malware Config

Targets

    • Target
      https://secureemail.gs.com/formpostdir/securereader?id=MdD4St3yiUVTFbRqqRBozSAxMbTK0Qbh&brand=3ae2ebb861ee94e02&data=05|02|[email protected]|dff82ded22084699054508def4a2f162|10338048193a4298abea3596ae88b05e|0|0|639217178162131414|Unknown|TWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ==|0|||&sdata=siN/XoaR4FoDrIb32NZXiLaYL7TBRK+CBe06Vtwrv7g=&reserved=0
    • Drops desktop.ini file(s)

    • Detected potential entity reuse from brand GOOGLE.

MITRE ATT&CK Enterprise v16

Tasks