URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://my.freshbooks.com/#/link/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzeXN0ZW1pZCI6ODQxNzczOSwidXNlcmlkIjoyNTUyMjksInR5cGUiOiJpbnZvaWNlIiwib2JqZWN0aWQiOjExMTM2NzEsImV4cCI6MTc0NTI1NTQwNywibGV2ZWwiOjB9.wBCvs6-NR70sIbvdSEtE_VXjtAm21aUzclOlNzIl22M?companyName=Mitch&invoiceNumber=0000257&ownerEmail=mitch%40kpco23.com&type=primary
Resource
win10v2004-20240412-en
General
-
Target
https://my.freshbooks.com/#/link/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzeXN0ZW1pZCI6ODQxNzczOSwidXNlcmlkIjoyNTUyMjksInR5cGUiOiJpbnZvaWNlIiwib2JqZWN0aWQiOjExMTM2NzEsImV4cCI6MTc0NTI1NTQwNywibGV2ZWwiOjB9.wBCvs6-NR70sIbvdSEtE_VXjtAm21aUzclOlNzIl22M?companyName=Mitch&invoiceNumber=0000257&ownerEmail=mitch%40kpco23.com&type=primary
Malware Config
Signatures
-
A potential corporate email address has been identified in the URL: /link/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzeXN0ZW1pZCI6ODQxNzczOSwidXNlcmlkIjoyNTUyMjksInR5cGUiOiJpbnZvaWNlIiwib2JqZWN0aWQiOjExMTM2NzEsImV4cCI6MTc0NTI1NTQwNywibGV2ZWwiOjB9.wBCvs6-NR70sIbvdSEtE_VXjtAm21aUzclOlNzIl22M?companyName=Mitch&invoiceNumber=0000257&[email protected]&type=primary