General

  • Target
    http://url3029.kingconf.com/ls/click?upn=u001.Vr182d1h8sEcP4OZlzIe6BmQm-2B50iRVILeftX47yAF-2F5ui5rFS7RQtgtIE08F3ufcLME_a7Yw5hoVwb-2BlknIkebQX9-2FiRNAKr392-2FExBCX3n-2FapoVzoJd9TxeKWcMve7-2BYBORPtLSNKEduwWwPn9X-2FklJuOkEXKA6cwGvJ-2BX080hTa0ECLkwzLamRMVFnlN2vsmD3gNzuisqNuOFuSNjzYgrYT3oHIkJGW-2FPKhr9n7o9OclobRzCHxZldyVqMvdbCGL4rZUMHjPwYYK4hji3K0LFGBA-3D-3D
  • Sample260824-pd2w2aszhw
Score
6/10

Malware Config

Targets

    • Target
      http://url3029.kingconf.com/ls/click?upn=u001.Vr182d1h8sEcP4OZlzIe6BmQm-2B50iRVILeftX47yAF-2F5ui5rFS7RQtgtIE08F3ufcLME_a7Yw5hoVwb-2BlknIkebQX9-2FiRNAKr392-2FExBCX3n-2FapoVzoJd9TxeKWcMve7-2BYBORPtLSNKEduwWwPn9X-2FklJuOkEXKA6cwGvJ-2BX080hTa0ECLkwzLamRMVFnlN2vsmD3gNzuisqNuOFuSNjzYgrYT3oHIkJGW-2FPKhr9n7o9OclobRzCHxZldyVqMvdbCGL4rZUMHjPwYYK4hji3K0LFGBA-3D-3D
    Score
    6/10
    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v16

Tasks