General

  • Target
    https://www.google.at/url?q=amp/adservice.google.com.br%252Fddm%252Fclk%252F424929466%253B226923624%253Br%253Bu%253Dds%2526cyc%253DcGaQuUBCnOkqnfohUswY%2526ropx%253DGdhxQLaQNr%2526fpaz%253DqTohk2ACWuJwg9DBaVDF%2526gyy%253Dq8CIS48u9f%253B%253F%252F%252Fruslanstudio.com%252F%252F.fe0157639%2F5cZEzqt%252336923623FamilyZ3JtYXllckBlbmFpcmUuZXM=
  • Sample260824-g26wwstdpb

Malware Config

Targets

    • Target
      https://www.google.at/url?q=amp/adservice.google.com.br%252Fddm%252Fclk%252F424929466%253B226923624%253Br%253Bu%253Dds%2526cyc%253DcGaQuUBCnOkqnfohUswY%2526ropx%253DGdhxQLaQNr%2526fpaz%253DqTohk2ACWuJwg9DBaVDF%2526gyy%253Dq8CIS48u9f%253B%253F%252F%252Fruslanstudio.com%252F%252F.fe0157639%2F5cZEzqt%252336923623FamilyZ3JtYXllckBlbmFpcmUuZXM=
    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Detected potential entity reuse from brand MICROSOFT.

MITRE ATT&CK Enterprise v16

Tasks