URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://na500cs3.koncert.com/na500-emailservices/decrypt?clet=0CD290B63DE93001DA431046F4EA9364F03356EB6E2C7E3B81F1781FD26622840710305EA763BC70B63D4C3943C969AF7D5E2A60E03D3F5F60985197B0DFB46305E1DC3C339F28BC37248012BC36AF6385DA66ED04564DB27E19FC89632A5A0214D325E32BCD55BBDA3E348B533EBEA1952EFA637F2C5A36C3E0D096C2F5D370__DEL__xueyingjie@johndeere.com
Resource
win10v2004-20240412-en
General
-
Target
https://na500cs3.koncert.com/na500-emailservices/decrypt?clet=0CD290B63DE93001DA431046F4EA9364F03356EB6E2C7E3B81F1781FD26622840710305EA763BC70B63D4C3943C969AF7D5E2A60E03D3F5F60985197B0DFB46305E1DC3C339F28BC37248012BC36AF6385DA66ED04564DB27E19FC89632A5A0214D325E32BCD55BBDA3E348B533EBEA1952EFA637F2C5A36C3E0D096C2F5D370__DEL__xueyingjie@johndeere.com
Malware Config
Signatures
-
A potential corporate email address has been identified in the URL: 0CD290B63DE93001DA431046F4EA9364F03356EB6E2C7E3B81F1781FD26622840710305EA763BC70B63D4C3943C969AF7D5E2A60E03D3F5F60985197B0DFB46305E1DC3C339F28BC37248012BC36AF6385DA66ED04564DB27E19FC89632A5A0214D325E32BCD55BBDA3E348B533EBEA1952EFA637F2C5A36C3E0D096C2F5D370__DEL__xueyingjie@johndeere.com