General

  • Target
    https://www.bing.com/ck/a?!&&p=7a5a69a8347bb52c7c4627c36044ddf543c0366890150a8e547b3169b50252a3JmltdHM9MTc5MDI5NDQwMA&ptn=3&ver=2&hsh=4&fclid=01790436-56c4-64b5-1cc0-13eb577e65d8&psq=astra+client+2&u=a1aHR0cHM6Ly9hc3RyYWNsaWVudC5jb20v
  • Sample260925-tz6vbsff75

Malware Config

Targets

    • Target
      https://www.bing.com/ck/a?!&&p=7a5a69a8347bb52c7c4627c36044ddf543c0366890150a8e547b3169b50252a3JmltdHM9MTc5MDI5NDQwMA&ptn=3&ver=2&hsh=4&fclid=01790436-56c4-64b5-1cc0-13eb577e65d8&psq=astra+client+2&u=a1aHR0cHM6Ly9hc3RyYWNsaWVudC5jb20v
    • A potential corporate email address has been identified in the URL

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Probable phishing domain

MITRE ATT&CK Enterprise v16

Tasks