General

  • Target
    https://eu.icp.ids.api.iris.microsoft.com/api/v2/a/c?url=https%3a%2f%2fgo.microsoft.com%2ffwlink%2f%3fLinkId%3d2374979&d=AIAAC5EMLYCVJMYXWS5UG2DEP3OXRS2D5WMG7SSAPF7FFZ3EN6UD6IR6ZVTPH5OBXIWN3RQWCTDMCWKQNUPCKREM2DOEPRQ4ULNVRNQYCC6VPY2CFPTXY5RNDBBDSEM23ECMCSUK4UZKZY256A2GI5XFMMKMDT3WPM766MRMLE6EXNVDUFP4I4JSLIPK7KQJ4CHF45R5IVTDWKILHCFWTNPJ33SI64A56IOBRAHI3X5UNW4QDXZTQIHZVN4PYOE7OIVWO&i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s=2XYRY6WRMRX6B2X6D55K5VRX6KWDI3P5RRGS4UQIVOVENFPAWHRQ
  • Sample260910-k43h2atxey

Malware Config

Targets

    • Target
      https://eu.icp.ids.api.iris.microsoft.com/api/v2/a/c?url=https%3a%2f%2fgo.microsoft.com%2ffwlink%2f%3fLinkId%3d2374979&d=AIAAC5EMLYCVJMYXWS5UG2DEP3OXRS2D5WMG7SSAPF7FFZ3EN6UD6IR6ZVTPH5OBXIWN3RQWCTDMCWKQNUPCKREM2DOEPRQ4ULNVRNQYCC6VPY2CFPTXY5RNDBBDSEM23ECMCSUK4UZKZY256A2GI5XFMMKMDT3WPM766MRMLE6EXNVDUFP4I4JSLIPK7KQJ4CHF45R5IVTDWKILHCFWTNPJ33SI64A56IOBRAHI3X5UNW4QDXZTQIHZVN4PYOE7OIVWO&i=AIAACY7O2VI5NSLJU54V3G2W6URYB2HZSOI22QSRB2T6LJWOIBIXAVIEY5B4WY65B44YN3BVUF6QGUDYCSC2BD3DQUZJE6AYRQZ7DL22Q4UDKASVURWXE2WQZ5LHERUCN2GJBHT7VMBOTAWC3ZQSKMQNP46ZPFPCRSCKT2YDNR5S4JQRYMOCIK2JDRAOEUUIH2YSITZPKYAUL5Q4GOPISCQOA6S4X57DVVO773Y7TTQ2DY4PGLLRBRTTGC6PB5YJOLYBAXFIPJ3M4UB4TIN3RIPAAMKH5WWPLGK3FZRBVFLUMHVPBA5URD5PMFNSPKJKZJSIM4VEFRUEGKAKIKPEUBSWJF3MLJCS2WRI6O25VL3JJRFSYJUYHU2BFIUEIZR565ZPPCP4EDGO6FA3NQLVQ2PKLCLXVT6PHGONYYTELSHDNMYZ5NGJJRPP5QWH5SYNSSDHFM3C7T6QKNL7ROB3SNNNQDYRC65DVKNVA2QHQI7KV4AK4R4WCMXJH2LM4ROB7D3TAVIOPUQKPV6OBKEA5TISA4PR6DI&s=2XYRY6WRMRX6B2X6D55K5VRX6KWDI3P5RRGS4UQIVOVENFPAWHRQ
    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v16

Tasks