General

  • Target
    https://taslimaenterprise.com/adobe/
  • Sample260922-emfp2sxdna

Malware Config

Targets

    • Target
      https://taslimaenterprise.com/adobe/
    Score
    7/10
    • Use of msiexec (install) with remote resource

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Executes a VBScript file via the Windows Script Host.

MITRE ATT&CK Enterprise v16

Tasks