General

  • Target
    https://shared.outlook.inky.com/link?domain=join.plaiir.com&t=h.eJxNjMsOwiAURH_FsDblJVC6auJWv8HQ3lvFttAgNSbGf1e6cjOLmTnnTdY0kWZHbjkvj4bSe_ShWibnfar6ONOjAzw7gPi6nHwYc0Ik-x0ZCxMwx3Qdcs2YEZrT_vdtS8wbsPHWOqFqbRwIVg8KHOpOwWBMhwyldJQbpQ-CS8krqZTVyhY_Fv-Izw5D9Ln1_RRXKMIyQhn_qs8Xqk09cA.MEUCIQCjQwbNYQx_V73W2HHmjcqWp3kM_5vfhe4L8CNFOipIFgIgHwaCpzclsXp2ml8PnZOa5oNkrG_IIh_zgIrdIlTsIX0
  • Sample260920-xvcbpscm7z

Malware Config

Targets

    • Target
      https://shared.outlook.inky.com/link?domain=join.plaiir.com&t=h.eJxNjMsOwiAURH_FsDblJVC6auJWv8HQ3lvFttAgNSbGf1e6cjOLmTnnTdY0kWZHbjkvj4bSe_ShWibnfar6ONOjAzw7gPi6nHwYc0Ik-x0ZCxMwx3Qdcs2YEZrT_vdtS8wbsPHWOqFqbRwIVg8KHOpOwWBMhwyldJQbpQ-CS8krqZTVyhY_Fv-Izw5D9Ln1_RRXKMIyQhn_qs8Xqk09cA.MEUCIQCjQwbNYQx_V73W2HHmjcqWp3kM_5vfhe4L8CNFOipIFgIgHwaCpzclsXp2ml8PnZOa5oNkrG_IIh_zgIrdIlTsIX0
    • Gatekeeper Bypass

      Adversaries may modify file attributes and subvert Gatekeeper functionality to evade user prompts and execute untrusted programs. Gatekeeper is a set of technologies that act as layer of Apples security model to ensure only trusted applications are executed on a host.

    • File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer) may leave traces to indicate to what was done within a network and how. Removal of these files can occur.

MITRE ATT&CK Enterprise v16

Tasks