hxxps://awpi-01[.]mwoengwage[.]com[.]/v1/emailclick?ewm=joaquim[.]brites%40sma-europe[.]eu&user_id=%40%24xy%2A%40%21hYs·%3AçèZ+Ø%15ll¸ÊÚ2®+½Õh¤A%0Aó%00[.]5%1F&d=%40%24xy%2A%40%21hn%3C%60f%3B%24%5CoR%1B+cm&cid=%40%24xy%2A%40%21hº§M%14%24%0FD¿îZf%08ù%17ùôbl%03rxvMV%28Ñ%00ï%1Ds§Vä%3F%0DÑOt³J¾Ç¬vs%1BþÁÑªiqDøó%7F%2C%16+%3E%5CÈÈ×o%21%07ªá%25%0B¿%00%10&ut=l&moeclickid=61b35f5997223f7c61e6625a_F_T_EM_AB_0_P_0_TIME_2021-12-10+14%3A09%3A02[.]859891_L_0ecli27&rlink=hxxp://oa5[.]rei[.]stwpbogor[.]ac[.]id[.]/?QQQ#[.]eWVydmFudC5wZWx0ZWtpYW5AZHJpbGxzY2FuLmNvbQ==

General

Target

https://awpi-01.mwoengwage.com./v1/emailclick?ewm=joaquim.brites%40sma-europe.eu&user_id=%40%24xy%2A%40%21hYs·%3AçèZ+Ø%15ll¸ÊÚ2®+½Õh¤A%0Aó%00.5%1F&d=%40%24xy%2A%40%21hn%3C%60f%3B%24%5CoR%1B+cm&cid=%40%24xy%2A%40%21hº§M%14%24%0FD¿îZf%08ù%17ùôbl%03rxvMV%28Ñ%00ï%1Ds§Vä%3F%0DÑOt³J¾Ç¬vs%1BþÁÑªiqDøó%7F%2C%16+%3E%5CÈÈ×o%21%07ªá%25%0B¿%00%10&ut=l&moeclickid=61b35f5997223f7c61e6625a_F_T_EM_AB_0_P_0_TIME_2021-12-10+14%3A09%3A02.859891_L_0ecli27&rlink=http://oa5.rei.stwpbogor.ac.id./?QQQ#.eWVydmFudC5wZWx0ZWtpYW5AZHJpbGxzY2FuLmNvbQ==
Sample

230318-c8t4fsda4y

Score

8^/10

phishing

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact