URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://0fficed653.com/redirect.cgi?ref=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&sso_reload=true#[email protected]=
Resource
win10v2004-20231215-en
General
-
Target
https://0fficed653.com/redirect.cgi?ref=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmY2xpZW50LXJlcXVlc3QtaWQ9YWE0OTc3NjMtMmE4MC0zOTFmLTFiNTAtZGFlZTAyM2I0MjI2JnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODQyNDg3NDI3Mzc2Nzg3OC4xODJjN2YwMy0wYjBlLTRhMjMtYTc1Ny0yZWMzNDA0ODdhYWQmc3RhdGU9RFlzeEZvQXdDTVZhZlI0SGk0RDlYQWRyWFIyOXZnekpsTlJTeXBvc1NlVlVRVmMzTVljSkZCME8zdy1YZ1llVi1PSkpGcUlVT0VFeWh4cG5HM0hYZkxmMmZ0Ri0=&sso_reload=true#[email protected]=
Malware Config
Signatures
-
A potential corporate email address has been identified in the URL: [email protected]=