General

  • Target
    https://ch6n57g6ytykxvsgcg2fild7ihmfcja32kazybree5gns3yky5qa.4.ario.arweave.io.vn/Efze_N7E8KvWRhG0VCx_QdhRJBvSgZwGJCdM2W8Kx2A?e=UzUO9q91IsDYcrGmF8ushRLpVL1HCDqjfaSCetTkyi0oOFCy1yXOgXCqHMQD432SaJUqeENsb0XBH25WYX6jNHUNICIf0xbsq4nIkKcSnqrTVI4LODriTicmEIQe9ejZ
  • Sample260903-qw5lbatzhy

Malware Config

Targets

    • Target
      https://ch6n57g6ytykxvsgcg2fild7ihmfcja32kazybree5gns3yky5qa.4.ario.arweave.io.vn/Efze_N7E8KvWRhG0VCx_QdhRJBvSgZwGJCdM2W8Kx2A?e=UzUO9q91IsDYcrGmF8ushRLpVL1HCDqjfaSCetTkyi0oOFCy1yXOgXCqHMQD432SaJUqeENsb0XBH25WYX6jNHUNICIf0xbsq4nIkKcSnqrTVI4LODriTicmEIQe9ejZ
    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v16

Tasks