URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://webviews.leena.ai/v2/custom/PRI/offboarding/employee-handover-details?banner=true&botId=6011040dc4cf01009a558108&token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJsb2dpbklkVHlwZSI6ImVtYWlsIiwibG9naW5NZXRob2QiOiJwcm94eSIsIl9pZCI6IjYwY2I2N2QzMTg5ZGY2MDBjZjM4NTU4NyIsImp0aSI6IjY1ODg3OGM4NGVjYTE5YWZiNDIxNWM5ZiIsImF1ZCI6IjYwY2I2N2QzMTg5ZGY2MDBjZjM4NTU4NyIsImlhdCI6MTcwMzQ0MjYzMiwiZXhwIjoxNzA3MzMwNjMyLCJpc3MiOiJjb3JlIn0.jy1czYzbtZVwe7zXRwHWWTuajajIXBxT1hkLALKGEg8&channel=web&[email protected]
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
https://webviews.leena.ai/v2/custom/PRI/offboarding/employee-handover-details?banner=true&botId=6011040dc4cf01009a558108&token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJsb2dpbklkVHlwZSI6ImVtYWlsIiwibG9naW5NZXRob2QiOiJwcm94eSIsIl9pZCI6IjYwY2I2N2QzMTg5ZGY2MDBjZjM4NTU4NyIsImp0aSI6IjY1ODg3OGM4NGVjYTE5YWZiNDIxNWM5ZiIsImF1ZCI6IjYwY2I2N2QzMTg5ZGY2MDBjZjM4NTU4NyIsImlhdCI6MTcwMzQ0MjYzMiwiZXhwIjoxNzA3MzMwNjMyLCJpc3MiOiJjb3JlIn0.jy1czYzbtZVwe7zXRwHWWTuajajIXBxT1hkLALKGEg8&channel=web&[email protected]
Resource
win10v2004-20231215-en
General
-
Target
https://webviews.leena.ai/v2/custom/PRI/offboarding/employee-handover-details?banner=true&botId=6011040dc4cf01009a558108&token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJsb2dpbklkVHlwZSI6ImVtYWlsIiwibG9naW5NZXRob2QiOiJwcm94eSIsIl9pZCI6IjYwY2I2N2QzMTg5ZGY2MDBjZjM4NTU4NyIsImp0aSI6IjY1ODg3OGM4NGVjYTE5YWZiNDIxNWM5ZiIsImF1ZCI6IjYwY2I2N2QzMTg5ZGY2MDBjZjM4NTU4NyIsImlhdCI6MTcwMzQ0MjYzMiwiZXhwIjoxNzA3MzMwNjMyLCJpc3MiOiJjb3JlIn0.jy1czYzbtZVwe7zXRwHWWTuajajIXBxT1hkLALKGEg8&channel=web&[email protected]
Malware Config
Signatures
-
A potential corporate email address has been identified in the URL: [email protected]