hxxps://newtownyardley[.]com/sharedInc/cf/polTrack[.]cfm?Buspart_id=4120&Enterprise_Code=CommNewYard&Sid_Code=CommNewYard&Prod_id=2418&Server_Name=newtownyardley[.]com&Path_Info=/schools/polBuspart[.]cfm&Query_String=Buspart_Id=chapin-school&Image_Url=http%3A%2F%2F63[.]xn--gndemhaber-9db[.]com/John[.]doe/John[.]doe@hobbit[.]com/%2FVerizon&txid=B20200331_1488798683&lid=18207&tid=121811&vno=5&ltid=498307

General

Target

https://newtownyardley.com/sharedInc/cf/polTrack.cfm?Buspart_id=4120&Enterprise_Code=CommNewYard&Sid_Code=CommNewYard&Prod_id=2418&Server_Name=newtownyardley.com&Path_Info=/schools/polBuspart.cfm&Query_String=Buspart_Id=chapin-school&Image_Url=http%3A%2F%2F63.xn--gndemhaber-9db.com/John.doe/[email protected]/%2FVerizon&txid=B20200331_1488798683&lid=18207&tid=121811&vno=5&ltid=498307
Sample

230323-f2g24adf84

Score

10^/10

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact