General

  • Target
    https://e.content.url.sap/dc/VIKGRDwQD101yDNlXvHRYVrakQwBglqPKoV-2fTxZSg2DNv9lB4PN1zTUuu6soItiIyH8JsUanOYSFLIHOxa0bss6sIqgZ6qI6nnf5sRm8GPRx99yndUOyAWOAI-J06FimW4C2otz0h6djrxwJ-dcWM-y0uP5Aw44dXHMBkMtCGsyeu6C9srysda-QwYGbFtPH00l6S6LxB9fbCU8lppv0-OM7O_ZKmXvnJwJ0IfcZT1fdeljVaiHrjPvacESIDZ6mTRJbMwEUAaM3o166dKlqwzz7F_2ox9huyuiXhdDC8H8A2U3nPw0W_b9X_iD59Mt6fo24gi4gQHzyss0v0ShFjNoW3qm1wvN1ZQav3gUdU=/MjEyLVRDVS0wMzQAAAGj0dCj25hwTqXNv-bO0m1n0xaF9g14b2ycmHayJ_5lL1Wgj1q9kC1NpDk_BTYF0vdgbJFlp8o=
  • Sample260901-j2xpbsytf1

Malware Config

Targets

    • Target
      https://e.content.url.sap/dc/VIKGRDwQD101yDNlXvHRYVrakQwBglqPKoV-2fTxZSg2DNv9lB4PN1zTUuu6soItiIyH8JsUanOYSFLIHOxa0bss6sIqgZ6qI6nnf5sRm8GPRx99yndUOyAWOAI-J06FimW4C2otz0h6djrxwJ-dcWM-y0uP5Aw44dXHMBkMtCGsyeu6C9srysda-QwYGbFtPH00l6S6LxB9fbCU8lppv0-OM7O_ZKmXvnJwJ0IfcZT1fdeljVaiHrjPvacESIDZ6mTRJbMwEUAaM3o166dKlqwzz7F_2ox9huyuiXhdDC8H8A2U3nPw0W_b9X_iD59Mt6fo24gi4gQHzyss0v0ShFjNoW3qm1wvN1ZQav3gUdU=/MjEyLVRDVS0wMzQAAAGj0dCj25hwTqXNv-bO0m1n0xaF9g14b2ycmHayJ_5lL1Wgj1q9kC1NpDk_BTYF0vdgbJFlp8o=
    • Drops desktop.ini file(s)

    • Detected potential entity reuse from brand GOOGLE.

MITRE ATT&CK Enterprise v16

Tasks