URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://mcas-proxyweb.mcas.ms/certificate-checker?login=false&originalUrl=https://eur01.safelinks.protection.outlook.com.mcas.ms/?url=https%3A%2F%2Fapi.spently.com%2Fapi%2Fspently%2Fclick%3Fid%3D105133%26store%3Dhotelcollection%26type%3DOI%26cid%3D6272440696998%26url%3Dflexibleseuler.com%2Fjass%2FelqOB%2Fkcxzvz%2FcmFmYWVsLm9ydGVnYUB2aWFjZWxlcmUuZXM%3D&data=05%7C02%7Crafael.ortega%40viacelere.es%7C309ac810924c4a79d87208dc3eb816c6%7Cfdb676e92f5147928426ba06784d6d7f%7C0%7C0%7C638454207584270609%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=cwQH0qFEGIEuJj20%2BMLWCMJs%2F7Yu2wFWwvQtr8rpLTk%3D&reserved=0&McasTsid=20893&McasCSRF=e10d16faf4b94b644a80c56013e829789eb6758ff5381610406563c8a137f09e
Resource
win10v2004-20240226-en
General
-
Target
https://mcas-proxyweb.mcas.ms/certificate-checker?login=false&originalUrl=https://eur01.safelinks.protection.outlook.com.mcas.ms/?url=https%3A%2F%2Fapi.spently.com%2Fapi%2Fspently%2Fclick%3Fid%3D105133%26store%3Dhotelcollection%26type%3DOI%26cid%3D6272440696998%26url%3Dflexibleseuler.com%2Fjass%2FelqOB%2Fkcxzvz%2FcmFmYWVsLm9ydGVnYUB2aWFjZWxlcmUuZXM%3D&data=05%7C02%7Crafael.ortega%40viacelere.es%7C309ac810924c4a79d87208dc3eb816c6%7Cfdb676e92f5147928426ba06784d6d7f%7C0%7C0%7C638454207584270609%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=cwQH0qFEGIEuJj20%2BMLWCMJs%2F7Yu2wFWwvQtr8rpLTk%3D&reserved=0&McasTsid=20893&McasCSRF=e10d16faf4b94b644a80c56013e829789eb6758ff5381610406563c8a137f09e
Malware Config
Signatures
-
A potential corporate email address has been identified in the URL: 05|02|[email protected]|309ac810924c4a79d87208dc3eb816c6|fdb676e92f5147928426ba06784d6d7f|0|0|638454207584270609|Unknown|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0=|0|||