General

  • Target
    https://www.bing.com/ck/a?!&&p=6420f3619d95c3a8e2cafe7be4b6ca44499f0d09862f6dd7e23bf161d6a093dfJmltdHM9MTc4NzE4NDAwMA&ptn=3&ver=2&hsh=4&fclid=2ea7eda9-f171-6a18-1398-fb5af0156b22&psq=forza+horizon+free+6+download&u=a1aHR0cHM6Ly9yZXBhY2tsYWIuY29tL2ZvcnphLWhvcml6b24tMS1mcmVlLWRvd25sb2FkLw
  • Sample260820-tm6zkatzdw

Malware Config

Targets

    • Target
      https://www.bing.com/ck/a?!&&p=6420f3619d95c3a8e2cafe7be4b6ca44499f0d09862f6dd7e23bf161d6a093dfJmltdHM9MTc4NzE4NDAwMA&ptn=3&ver=2&hsh=4&fclid=2ea7eda9-f171-6a18-1398-fb5af0156b22&psq=forza+horizon+free+6+download&u=a1aHR0cHM6Ly9yZXBhY2tsYWIuY29tL2ZvcnphLWhvcml6b24tMS1mcmVlLWRvd25sb2FkLw
    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Mark of the Web detected: This indicates that the page was originally saved or cloned.

MITRE ATT&CK Enterprise v16

Tasks