hxxps://ums[.]koreanair[.]com/Check[.]html irectUrl=3D9JRD01MTMy U1RZUEU9TUFTUw=3DTElTVF9UQUJMRT1FTVNfTUFTU19TRU5EX0xJ= U1Q=3DE9TVF9JRD0yMDE5MDkyMzAwMDAy Q0lEPTAwMg=3DUR= L=3Dhxxps://ums[.]koreanair[.]com/Check[.]html U1RZUEU9T= UFTUw=3DTElTVF9UQUJMRT1FTVNfTUFTU19TRU5EX0xJU1Q=3DE9TVF9JRD0yMDE5MDkyMzAwMD= Q0lEPTAwMg=3DURL=3Dhxxps://mymessyblog[.]com/new= /auth/bngsp3[//]/lev[.]khasis@momentus[.]space

General

Target

https://ums.koreanair.com/Check.html irectUrl=3D9JRD01MTMy U1RZUEU9TUFTUw=3DTElTVF9UQUJMRT1FTVNfTUFTU19TRU5EX0xJ= U1Q=3DE9TVF9JRD0yMDE5MDkyMzAwMDAy Q0lEPTAwMg=3DUR= L=3Dhttps://ums.koreanair.com/Check.html U1RZUEU9T= UFTUw=3DTElTVF9UQUJMRT1FTVNfTUFTU19TRU5EX0xJU1Q=3DE9TVF9JRD0yMDE5MDkyMzAwMD= Q0lEPTAwMg=3DURL=3Dhttps://mymessyblog.com/new= /auth/bngsp3///[email protected]
Sample

230324-pdrfaseb96

Score

8^/10

phishing

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact