General

  • Target
    http://unizares-my.sharepoint.com/:o:/g/personal/774464_unizar_es/IgCB32y_lO3-QYey4vywanrOAVX6js7LMmFa5-nVAtw5e-s
  • Sample260831-pf7kastyav

Malware Config

Targets

    • Target
      http://unizares-my.sharepoint.com/:o:/g/personal/774464_unizar_es/IgCB32y_lO3-QYey4vywanrOAVX6js7LMmFa5-nVAtw5e-s
    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Detected potential entity reuse from brand MICROSOFT.

MITRE ATT&CK Enterprise v16

Tasks