General
-
Target
https://www.cambeywest.com/openclick/?M=NAT202202251027&t=c&p=NAT&a=00432291&s=EN2208DIGC&c=link4-cover&[email protected]&l=//order1616%25E3%2580%2582com/php_file/c29rdW50aGVhcnkuaGFzQGp0cnVzdHJveWFsLmNvbQ==&creative_id=601&tag_name=Rob_A_Facebook&operative_id=156354
-
Sample
240429-j1wqmsea58
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://www.cambeywest.com/openclick/?M=NAT202202251027&t=c&p=NAT&a=00432291&s=EN2208DIGC&c=link4-cover&[email protected]&l=//order1616%25E3%2580%2582com/php_file/c29rdW50aGVhcnkuaGFzQGp0cnVzdHJveWFsLmNvbQ==&creative_id=601&tag_name=Rob_A_Facebook&operative_id=156354
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
https://www.cambeywest.com/openclick/?M=NAT202202251027&t=c&p=NAT&a=00432291&s=EN2208DIGC&c=link4-cover&[email protected]&l=//order1616%25E3%2580%2582com/php_file/c29rdW50aGVhcnkuaGFzQGp0cnVzdHJveWFsLmNvbQ==&creative_id=601&tag_name=Rob_A_Facebook&operative_id=156354
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-