URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://centriceu.service-now.com/now/nav/ui/classic/params/target/cmdb_ci_list.do%3Fsysparm_query%3DnameSTARTSWITHTomcat%40nldcb%26sysparm_first_row%3D1%26sysparm_view%3D%26sysparm_choice_query_raw%3D%26sysparm_list_header_search%3Dtrue
Resource
win11-20240221-en
6 signatures
150 seconds
General
-
Target
https://centriceu.service-now.com/now/nav/ui/classic/params/target/cmdb_ci_list.do%3Fsysparm_query%3DnameSTARTSWITHTomcat%40nldcb%26sysparm_first_row%3D1%26sysparm_view%3D%26sysparm_choice_query_raw%3D%26sysparm_list_header_search%3Dtrue
Score
8/10
Malware Config
Signatures
-
A potential corporate email address has been identified in the URL: cmdb_ci_list.do?sysparm_query=nameSTARTSWITHTomcat@nldcb&sysparm_first_row=1&sysparm_view=&sysparm_choice_query_raw=&sysparm_list_header_search=true