General

  • Target
    https://associationeaudecoco-my.sharepoint.com/:o:/g/personal/suivi_financier5_ongbelavenir_org/IgD_LRilwt0JRYrDIY3ksVuLAdEkP-rbIXoShNpQ-hLrYAs?e=i7EUIP
  • Sample260828-r3da3sdc68

Malware Config

Targets

    • Target
      https://associationeaudecoco-my.sharepoint.com/:o:/g/personal/suivi_financier5_ongbelavenir_org/IgD_LRilwt0JRYrDIY3ksVuLAdEkP-rbIXoShNpQ-hLrYAs?e=i7EUIP
    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Network Share Discovery

      Attempt to gather information on host network.

    • Detected potential entity reuse from brand MICROSOFT.

MITRE ATT&CK Enterprise v16

Tasks