General

  • Target
    https://www.google.com.bn/url?q=amp/adservice.google.com.ph%252Fddm%252Fclk%252F424929466%253B226923624%253Br%253Bu%253Dds%2526cyc%253DcGaQuUBCnOkqnfohUswY%2526ropx%253DGdhxQLaQNr%2526fpaz%253DqTohk2ACWuJwg9DBaVDF%2526gyy%253Dq8CIS48u9f%253B%253F%252F%252Fruslanstudio.com%252F%252F.chd028162%2FMWMGgBG%252336923623FamilyZm9pQHVrcmkub3Jn
  • Sample260814-qvlrtavcmf

Malware Config

Targets

    • Target
      https://www.google.com.bn/url?q=amp/adservice.google.com.ph%252Fddm%252Fclk%252F424929466%253B226923624%253Br%253Bu%253Dds%2526cyc%253DcGaQuUBCnOkqnfohUswY%2526ropx%253DGdhxQLaQNr%2526fpaz%253DqTohk2ACWuJwg9DBaVDF%2526gyy%253Dq8CIS48u9f%253B%253F%252F%252Fruslanstudio.com%252F%252F.chd028162%2FMWMGgBG%252336923623FamilyZm9pQHVrcmkub3Jn
    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Detected potential entity reuse from brand MICROSOFT.

MITRE ATT&CK Enterprise v16

Tasks