General

  • Target
    https://idahodemcaucus-dot-yamm-track.appspot.com/Redirect?ukey=19VtJgg0ch4smQbdnWGlrz7KV1YfH5wmQrdIo26IsmIY-131683054&key=YAMMID-76266804&link=https://rsodivnkrl.entwinescalping.com/
  • Sample261026-rt6w2aev5y

Malware Config

Targets

    • Target
      https://idahodemcaucus-dot-yamm-track.appspot.com/Redirect?ukey=19VtJgg0ch4smQbdnWGlrz7KV1YfH5wmQrdIo26IsmIY-131683054&key=YAMMID-76266804&link=https://rsodivnkrl.entwinescalping.com/
    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Detected potential entity reuse from brand MICROSOFT.

MITRE ATT&CK Enterprise v16

Tasks