General

  • Target
    https://korporatetds-my.sharepoint.com/:o:/g/personal/soporteinformatica_korporatech_es/IgCBXDZEfh7kS6arO2CO7ESnAasBPv3-XzChr-LLmK_GvOE?e=3TCjso
  • Sample260929-r4f4cstxe1

Malware Config

Targets

    • Target
      https://korporatetds-my.sharepoint.com/:o:/g/personal/soporteinformatica_korporatech_es/IgCBXDZEfh7kS6arO2CO7ESnAasBPv3-XzChr-LLmK_GvOE?e=3TCjso
    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Detected potential entity reuse from brand MICROSOFT.

MITRE ATT&CK Enterprise v16

Tasks