hxxps://ums[.]koreanair[.]com/Check[.]html?redirectUrl=TV9JRD01MTMy&U1RZUEU9TUFTUw==&TElTVF9UQUJMRT1FTVNfTUFTU19TRU5EX0xJU1Q=&UE9TVF9JRD0yMDE5MDkyMzAwMDAy&VEM9MjAxOTEwMjM=&S0lORD1D&Q0lEPTAwMg==&URL=hxxps://6d9i1GfgzMiAMSt[.]etipsonline[.]com/#a2Vsc2V5LmZyb3N0QHRyYWRpdGlvbnNoZWFsdGguY29t

General

Target

https://ums.koreanair.com/Check.html?redirectUrl=TV9JRD01MTMy&U1RZUEU9TUFTUw==&TElTVF9UQUJMRT1FTVNfTUFTU19TRU5EX0xJU1Q=&UE9TVF9JRD0yMDE5MDkyMzAwMDAy&VEM9MjAxOTEwMjM=&S0lORD1D&Q0lEPTAwMg==&URL=https://6d9i1GfgzMiAMSt.etipsonline.com/#a2Vsc2V5LmZyb3N0QHRyYWRpdGlvbnNoZWFsdGguY29t
Sample

221130-1jm6lsge69

Score

10^/10

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact