URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://link.mail.beehiiv.com/ls/click?upn=-2BWXDziPxOGgZigNc0Tllpep9Cdk81EB-2FyZN215Yw174NDQQiBM1SCYpUglx5FILyTTvNcK4xYG4-2BYgALVRAEvAi4-2FEf435WPkvkFM5YQakJCJGE2Pn3Ks3BN3lF-2Btj3dYO57Rrper6A9cAFUxeebvnLIFcNqqtuBuBgc-2FD3zB9mJOpqiYvBux96zqXUYKHptUqKh_h-2BtcwxcG4YmuTeP4ZkZ-2FRXLbsJUEHyhdTHkOAD62PLaWdpt0lnfrWSsaac6DFJ1QadF3-2Bc2RIDVOhjYauHVwXnKv-2Fo7WKiNfqmvEexiLGoFFpi78CSgk8lzLUG6bXScL3hwr6-2BlmFHW58Cyv2VKHNYtqTjp1PshlTOiCqB8oL-2FQjeYfFYWQWgYfE6OqUkWqV2aR6sidjeU2sDFPfr0APbNIQgZ1WUejzBo06UgBQrVNLCDauBzZnLj8Xk-2FSF-2Bs-2BFvu6JcMH-2B1B23zaHSCBqHSON48rcmf9RoRGmU-2FeCsvLK0ZW9ob-2FXL3jU7ZrMfi31SpbqpEgVNR5zdENiYb2EKWmUZlHcNTbGM6nIdPFe-2BUbiBP-2B0kxZrsTnOFPGhI0HxxfEczkadBGIX99GaNKgwvLzr-2FWcRR71llreaiMcVUqrWecm7g81T9cUGrorINQlvLAyKmf0BQ9H44Hnywxb6IpA-3D-3D#/b542bd/bmV3YWNjb3VudHNtaWFtaUBjcmVkaWNvcnBjYXBpdGFsLmNvbQ==&data=05|02|[email protected]|d4c84fdf7b4542bc4be408dc1d15c9ff|5d93ebccf76943808b7e289fc972da1b|0|0|638417230729044421|Unknown|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0=|41000|||&sdata=dxZQSt/xR9kAmJEwOMaOkabfL7u0wBmyOBV8Va2TgvY=&reserved=0
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
https://link.mail.beehiiv.com/ls/click?upn=-2BWXDziPxOGgZigNc0Tllpep9Cdk81EB-2FyZN215Yw174NDQQiBM1SCYpUglx5FILyTTvNcK4xYG4-2BYgALVRAEvAi4-2FEf435WPkvkFM5YQakJCJGE2Pn3Ks3BN3lF-2Btj3dYO57Rrper6A9cAFUxeebvnLIFcNqqtuBuBgc-2FD3zB9mJOpqiYvBux96zqXUYKHptUqKh_h-2BtcwxcG4YmuTeP4ZkZ-2FRXLbsJUEHyhdTHkOAD62PLaWdpt0lnfrWSsaac6DFJ1QadF3-2Bc2RIDVOhjYauHVwXnKv-2Fo7WKiNfqmvEexiLGoFFpi78CSgk8lzLUG6bXScL3hwr6-2BlmFHW58Cyv2VKHNYtqTjp1PshlTOiCqB8oL-2FQjeYfFYWQWgYfE6OqUkWqV2aR6sidjeU2sDFPfr0APbNIQgZ1WUejzBo06UgBQrVNLCDauBzZnLj8Xk-2FSF-2Bs-2BFvu6JcMH-2B1B23zaHSCBqHSON48rcmf9RoRGmU-2FeCsvLK0ZW9ob-2FXL3jU7ZrMfi31SpbqpEgVNR5zdENiYb2EKWmUZlHcNTbGM6nIdPFe-2BUbiBP-2B0kxZrsTnOFPGhI0HxxfEczkadBGIX99GaNKgwvLzr-2FWcRR71llreaiMcVUqrWecm7g81T9cUGrorINQlvLAyKmf0BQ9H44Hnywxb6IpA-3D-3D#/b542bd/bmV3YWNjb3VudHNtaWFtaUBjcmVkaWNvcnBjYXBpdGFsLmNvbQ==&data=05|02|[email protected]|d4c84fdf7b4542bc4be408dc1d15c9ff|5d93ebccf76943808b7e289fc972da1b|0|0|638417230729044421|Unknown|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0=|41000|||&sdata=dxZQSt/xR9kAmJEwOMaOkabfL7u0wBmyOBV8Va2TgvY=&reserved=0
Resource
win10v2004-20231215-en
General
-
Target
https://link.mail.beehiiv.com/ls/click?upn=-2BWXDziPxOGgZigNc0Tllpep9Cdk81EB-2FyZN215Yw174NDQQiBM1SCYpUglx5FILyTTvNcK4xYG4-2BYgALVRAEvAi4-2FEf435WPkvkFM5YQakJCJGE2Pn3Ks3BN3lF-2Btj3dYO57Rrper6A9cAFUxeebvnLIFcNqqtuBuBgc-2FD3zB9mJOpqiYvBux96zqXUYKHptUqKh_h-2BtcwxcG4YmuTeP4ZkZ-2FRXLbsJUEHyhdTHkOAD62PLaWdpt0lnfrWSsaac6DFJ1QadF3-2Bc2RIDVOhjYauHVwXnKv-2Fo7WKiNfqmvEexiLGoFFpi78CSgk8lzLUG6bXScL3hwr6-2BlmFHW58Cyv2VKHNYtqTjp1PshlTOiCqB8oL-2FQjeYfFYWQWgYfE6OqUkWqV2aR6sidjeU2sDFPfr0APbNIQgZ1WUejzBo06UgBQrVNLCDauBzZnLj8Xk-2FSF-2Bs-2BFvu6JcMH-2B1B23zaHSCBqHSON48rcmf9RoRGmU-2FeCsvLK0ZW9ob-2FXL3jU7ZrMfi31SpbqpEgVNR5zdENiYb2EKWmUZlHcNTbGM6nIdPFe-2BUbiBP-2B0kxZrsTnOFPGhI0HxxfEczkadBGIX99GaNKgwvLzr-2FWcRR71llreaiMcVUqrWecm7g81T9cUGrorINQlvLAyKmf0BQ9H44Hnywxb6IpA-3D-3D#/b542bd/bmV3YWNjb3VudHNtaWFtaUBjcmVkaWNvcnBjYXBpdGFsLmNvbQ==&data=05|02|[email protected]|d4c84fdf7b4542bc4be408dc1d15c9ff|5d93ebccf76943808b7e289fc972da1b|0|0|638417230729044421|Unknown|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0=|41000|||&sdata=dxZQSt/xR9kAmJEwOMaOkabfL7u0wBmyOBV8Va2TgvY=&reserved=0
Malware Config
Signatures
-
A potential corporate email address has been identified in the URL: /b542bd/bmV3YWNjb3VudHNtaWFtaUBjcmVkaWNvcnBjYXBpdGFsLmNvbQ==&data=05|02|[email protected]|d4c84fdf7b4542bc4be408dc1d15c9ff|5d93ebccf76943808b7e289fc972da1b|0|0|638417230729044421|Unknown|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0=|41000|||&sdata=dxZQSt/xR9kAmJEwOMaOkabfL7u0wBmyOBV8Va2TgvY=&reserved=0