General

  • Target
    https://us.link-protection.cymail.io/api/v2/url?u=v3.jz4AAICqqqrq%2F3TUw0lMVUXFVET9dlMVFQV32MzATd1BQ6cA%2BH3O87p5v%2F7Xep7Trrad9fv72HrM47Xp8faOObJlKTBoKFCWAcKUQCOjRkGxgM4GKjMTJLIANCxDaWGHkndUkm45NVeIqFeUVENvMdk%3D.7717e689-f4fc-468f-8743-c172c1828e02.cyprefix
  • Sample261111-wvddbsaw5n

Malware Config

Targets

    • Target
      https://us.link-protection.cymail.io/api/v2/url?u=v3.jz4AAICqqqrq%2F3TUw0lMVUXFVET9dlMVFQV32MzATd1BQ6cA%2BH3O87p5v%2F7Xep7Trrad9fv72HrM47Xp8faOObJlKTBoKFCWAcKUQCOjRkGxgM4GKjMTJLIANCxDaWGHkndUkm45NVeIqFeUVENvMdk%3D.7717e689-f4fc-468f-8743-c172c1828e02.cyprefix
    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Detected potential entity reuse from brand MICROSOFT.

MITRE ATT&CK Enterprise v16

Tasks