General
-
Target
http://go.onelink.me/107872968?pid=InProduct&c=Global_Internal_YGrowth_AndroidEmailSig__AndroidUsers&af_wl=ym&af_sub1=Internal&af_sub2=Global_YGrowth&af_sub3=EmailSignature&af_web_dp=http://fxtwhs28.sgshvs8i.shahrarman.ir/#[email protected]
-
Sample
230317-xv59sabf5w
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
http://go.onelink.me/107872968?pid=InProduct&c=Global_Internal_YGrowth_AndroidEmailSig__AndroidUsers&af_wl=ym&af_sub1=Internal&af_sub2=Global_YGrowth&af_sub3=EmailSignature&af_web_dp=http://fxtwhs28.sgshvs8i.shahrarman.ir/#[email protected]
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
http://go.onelink.me/107872968?pid=InProduct&c=Global_Internal_YGrowth_AndroidEmailSig__AndroidUsers&af_wl=ym&af_sub1=Internal&af_sub2=Global_YGrowth&af_sub3=EmailSignature&af_web_dp=http://fxtwhs28.sgshvs8i.shahrarman.ir/#[email protected]
Score10/10-
Detected microsoft outlook phishing page
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-