General

  • Target
    https://accounts.shopify.com/email-verifications/8ZQEF5ryB7LQA8y5WIcKtcBq-GravxeLh-YfSERNr-N2EY5pdZSazMJ09xuD7dHRg54
  • Sample260821-sdaz4awxay

Malware Config

Targets

    • Target
      https://accounts.shopify.com/email-verifications/8ZQEF5ryB7LQA8y5WIcKtcBq-GravxeLh-YfSERNr-N2EY5pdZSazMJ09xuD7dHRg54
    • Drops desktop.ini file(s)

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Probable phishing domain

MITRE ATT&CK Enterprise v16

Tasks