General

  • Target

    https://secure-web.cisco.com/1ELSiFNkDDcSx-trt_wLUMw_RiS1Y-2G77ua3rCp_fqqvQDi6WZVGuIE1LrvmE2KHip1cf0ziwDI6xfNPmXpSgQDHDq9ZwtuNI8KMcWyuAySzxTm49ZwYC9PdbolJCkLd882f8NDt2V8syRPjZ9YvlLzkFQ21fvf9vhptE2Wk0a_CZauVSLZ2QBHwOLpLBtKXNNcbUsKNRszNDucwAigHVCivybQzACo_R1cBoegz4jbmiKGBc7OXyZEHQHdr1bKf_XiTddOA0XAY2KMjGVbZrLPxtAomXpcTLR4GzOKlQ1SSmXrGUflkWQVxU9adrhj8/https%3A%2F%2Fycrms-tqaaa-aaaad-qdlkq-cai.raw.ic0.app%2Flogin2.html%3Fatqcrt%3D4OIpWjjHapS5ne8Vtt5FAB4dwz%26qxomhgm%3DIGT98ECRAREGFf8PJ4zvbLqu%26eoibnnpkd%3DfmONE44c9YG5uIuZ2kchvm8kkWYX%26wunazw%3DkUHmhLQEF2OBDbclEhgQeQ%26krguqcvd%3DmXX9CH4uaA9XJ6m%26mvplqtbus%3DLGljjBuJFJ9fTzJE%26username%3Dmiao.zhang%40dot.wi.gov

Score
8/10

Malware Config

Signatures

  • A potential corporate email address has been identified in the URL: login2.html?atqcrt=4OIpWjjHapS5ne8Vtt5FAB4dwz&qxomhgm=IGT98ECRAREGFf8PJ4zvbLqu&eoibnnpkd=fmONE44c9YG5uIuZ2kchvm8kkWYX&wunazw=kUHmhLQEF2OBDbclEhgQeQ&krguqcvd=mXX9CH4uaA9XJ6m&mvplqtbus=LGljjBuJFJ9fTzJE&username=miao.zhang@dot.wi.gov