Overview

overview

7

Static

static

1

URLScan

urlscan

1

https://healthcarepr...

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    https://healthcareprovidersolutions.s3.us-east-1.amazonaws.com/index.html#?770983756820compassdiversifiedholdings=bW11ZGdlQGJhY2tzdG9wc29sdXRpb25zLmNvbQ==
  • Sample260810-sxesdsck51
Score
7/10
discoveryphishing

Malware Config

Targets

    • Target
      https://healthcareprovidersolutions.s3.us-east-1.amazonaws.com/index.html#?770983756820compassdiversifiedholdings=bW11ZGdlQGJhY2tzdG9wc29sdXRpb25zLmNvbQ==
    Score
    7/10
    discoveryphishing

    • A potential corporate email address has been identified in the URL: httpsgztev.it.comi2noQbvuGfPkbKXgHFrJCoPsTdEfCWgpqxkBQ5Immudge@backstopsolutions.com

      phishing

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks