General

  • Target

    https://centriceu.service-now.com/now/nav/ui/classic/params/target/cmdb_ci_list.do%3Fsysparm_query%3DnameSTARTSWITHTomcat%40nldcb%26sysparm_first_row%3D1%26sysparm_view%3D%26sysparm_choice_query_raw%3D%26sysparm_list_header_search%3Dtrue

Score
8/10

Malware Config

Signatures

  • A potential corporate email address has been identified in the URL: cmdb_ci_list.do?sysparm_query=nameSTARTSWITHTomcat@nldcb&sysparm_first_row=1&sysparm_view=&sysparm_choice_query_raw=&sysparm_list_header_search=true

Files