General
-
Target
https://url10.mailanyone.net/scanner?m=1s83rc-0000LK-6P&d=4%7Cmail%2F90%2F1715976000%2F1s83rc-0000LK-6P%7Cin10h%7C57e1b682%7C12862802%7C10019077%7C6647B908E32A44FF352F85E2C61BD30F&o=%2Fphta%3A%2Frtsaipadslnv.%2F.owlomPec%2F0TMR&s=3DSRz2LNrQqySXTuJ7lmTQItJWI
-
Sample
240521-tksn6abc76
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://url10.mailanyone.net/scanner?m=1s83rc-0000LK-6P&d=4%7Cmail%2F90%2F1715976000%2F1s83rc-0000LK-6P%7Cin10h%7C57e1b682%7C12862802%7C10019077%7C6647B908E32A44FF352F85E2C61BD30F&o=%2Fphta%3A%2Frtsaipadslnv.%2F.owlomPec%2F0TMR&s=3DSRz2LNrQqySXTuJ7lmTQItJWI
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
https://url10.mailanyone.net/scanner?m=1s83rc-0000LK-6P&d=4%7Cmail%2F90%2F1715976000%2F1s83rc-0000LK-6P%7Cin10h%7C57e1b682%7C12862802%7C10019077%7C6647B908E32A44FF352F85E2C61BD30F&o=%2Fphta%3A%2Frtsaipadslnv.%2F.owlomPec%2F0TMR&s=3DSRz2LNrQqySXTuJ7lmTQItJWI
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-