General

  • Target
    https://cdn-west.knownhostlink.com/dc/t/mo/v3?t=eyJwIjoiMjAwMSAxNzE4MDEyOTM4NSBuaWNvbGUuZ2F0bGluQGNyYXdmb3JkZWxlY3RyaWNzdXBwbHkuY29tIDIxODY2OTM4NDUxMDcyMzA3MiA0NTU2ODgyOTM5MzIwNzI5OCAxIGFmZTQ0NWI2IDMxOTE3NiIsImV4cCI6MTgwMTkyODE4OH0.gFOyz4GQUmrhoYJYj9UBgwNEJl7eIMDjO1wFZi9k8WbdLrgOuUMFMHr_vTDZJz4DlA9mEyHqmOpQrJT1C-YdeA&requestId=w_10153615_SMR_5_645_89ee
  • Sample260810-tfqzrssdpb

Malware Config

Targets

    • Target
      https://cdn-west.knownhostlink.com/dc/t/mo/v3?t=eyJwIjoiMjAwMSAxNzE4MDEyOTM4NSBuaWNvbGUuZ2F0bGluQGNyYXdmb3JkZWxlY3RyaWNzdXBwbHkuY29tIDIxODY2OTM4NDUxMDcyMzA3MiA0NTU2ODgyOTM5MzIwNzI5OCAxIGFmZTQ0NWI2IDMxOTE3NiIsImV4cCI6MTgwMTkyODE4OH0.gFOyz4GQUmrhoYJYj9UBgwNEJl7eIMDjO1wFZi9k8WbdLrgOuUMFMHr_vTDZJz4DlA9mEyHqmOpQrJT1C-YdeA&requestId=w_10153615_SMR_5_645_89ee
    • Drops desktop.ini file(s)

    • Detected potential entity reuse from brand GOOGLE.

MITRE ATT&CK Enterprise v16

Tasks