General
-
Target
https://mandrillapp.com/track/click/30922613/a2n.co.za?p=eyJzIjoiZm53SENnN2dnR2puQThMNDlBXzJfd3QweWZrIiwidiI6MSwicCI6IntcInVcIjozMDkyMjYxMyxcInZcIjoxLFwidXJsXCI6XCJodHRwczpcXFwvXFxcL2Eybi5jby56YVxcXC9saWNlbnNlLmh0bWw_d2hpdGU9YldGeVkzVnpMbUpoZFhKQVltOWpZWEl1WTI5dFwiLFwiaWRcIjpcIjAwYTMzZWI2ZTU3ODQyYjdhNzljYWRkZjAyNTdhN2I1XCIsXCJ1cmxfaWRzXCI6W1wiYTY5ZGZkZjQwZGUxZmRkZDVkZGFjNTU2YzkyZGM1NjIwYjkyMzBmNVwiXX0ifQ
-
Sample
240521-1h4rzabc8z
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://mandrillapp.com/track/click/30922613/a2n.co.za?p=eyJzIjoiZm53SENnN2dnR2puQThMNDlBXzJfd3QweWZrIiwidiI6MSwicCI6IntcInVcIjozMDkyMjYxMyxcInZcIjoxLFwidXJsXCI6XCJodHRwczpcXFwvXFxcL2Eybi5jby56YVxcXC9saWNlbnNlLmh0bWw_d2hpdGU9YldGeVkzVnpMbUpoZFhKQVltOWpZWEl1WTI5dFwiLFwiaWRcIjpcIjAwYTMzZWI2ZTU3ODQyYjdhNzljYWRkZjAyNTdhN2I1XCIsXCJ1cmxfaWRzXCI6W1wiYTY5ZGZkZjQwZGUxZmRkZDVkZGFjNTU2YzkyZGM1NjIwYjkyMzBmNVwiXX0ifQ
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
https://mandrillapp.com/track/click/30922613/a2n.co.za?p=eyJzIjoiZm53SENnN2dnR2puQThMNDlBXzJfd3QweWZrIiwidiI6MSwicCI6IntcInVcIjozMDkyMjYxMyxcInZcIjoxLFwidXJsXCI6XCJodHRwczpcXFwvXFxcL2Eybi5jby56YVxcXC9saWNlbnNlLmh0bWw_d2hpdGU9YldGeVkzVnpMbUpoZFhKQVltOWpZWEl1WTI5dFwiLFwiaWRcIjpcIjAwYTMzZWI2ZTU3ODQyYjdhNzljYWRkZjAyNTdhN2I1XCIsXCJ1cmxfaWRzXCI6W1wiYTY5ZGZkZjQwZGUxZmRkZDVkZGFjNTU2YzkyZGM1NjIwYjkyMzBmNVwiXX0ifQ
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-