General

  • Target
    https://mango.pineapple-connect.com/api/v1/onboarding/admin/verify-magic-link?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjb21tdW5pdHlJRCI6IlBlbm5zeWx2YW5pYUNvbGxlZ2VPZlRlY2hub2xvZ3lXaWxsaWFtc3BvcnRQQSIsInVzZXJJRCI6IkZNU041bXhjT21kdDh5c2lMVVJyQWhpTDBPRjIiLCJlbWFpbCI6ImNtczEyNkBwY3QuZWR1IiwiaWF0IjoxNzg3ODQxODcwLCJleHAiOjE3ODg0NDY2NzB9.kxEKNI4e5xQWnGs78OZBBkwXBRcwek2k3m0bhJR4EG0
  • Sample260831-rc586swvhs

Malware Config

Targets

    • Target
      https://mango.pineapple-connect.com/api/v1/onboarding/admin/verify-magic-link?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjb21tdW5pdHlJRCI6IlBlbm5zeWx2YW5pYUNvbGxlZ2VPZlRlY2hub2xvZ3lXaWxsaWFtc3BvcnRQQSIsInVzZXJJRCI6IkZNU041bXhjT21kdDh5c2lMVVJyQWhpTDBPRjIiLCJlbWFpbCI6ImNtczEyNkBwY3QuZWR1IiwiaWF0IjoxNzg3ODQxODcwLCJleHAiOjE3ODg0NDY2NzB9.kxEKNI4e5xQWnGs78OZBBkwXBRcwek2k3m0bhJR4EG0
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v16

Tasks