General
-
Target
https://contactmonkey.com/api/v1/tracker?cm_session=6cb0d7b4-7514-49ed-a422-3EE1B3573A05&cs=d01410f1-e93a-498a-bdf9-aed95ac45c9b&cm_type=link&cm_link=c38d4278-31b3-4240-b05e-868db3a168a7&cm_destination=https://contactmonkey.com/api/v1/tracker?cm_session=78cba606-2264-447f-bc39-3EE1B3573Ac0&cs=825ad42b-2c78-40c6-8587-3b0541fc1564&cm_type=link&cm_link=0da11854-d710-40c4-8250-bcd92bcc7ee9&cm_destination=//ka7web.info/pub-a1ce42d361a04drr4r4ea122fb5e4f72.r2.dev/pub-a134deece2d361a04drr4r4ea1224f72.r2.dev/Volvo/YWxleC5kdW5uQHZvbHZvLmNvbQ==
-
Sample
240522-2gjababe79
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://contactmonkey.com/api/v1/tracker?cm_session=6cb0d7b4-7514-49ed-a422-3EE1B3573A05&cs=d01410f1-e93a-498a-bdf9-aed95ac45c9b&cm_type=link&cm_link=c38d4278-31b3-4240-b05e-868db3a168a7&cm_destination=https://contactmonkey.com/api/v1/tracker?cm_session=78cba606-2264-447f-bc39-3EE1B3573Ac0&cs=825ad42b-2c78-40c6-8587-3b0541fc1564&cm_type=link&cm_link=0da11854-d710-40c4-8250-bcd92bcc7ee9&cm_destination=//ka7web.info/pub-a1ce42d361a04drr4r4ea122fb5e4f72.r2.dev/pub-a134deece2d361a04drr4r4ea1224f72.r2.dev/Volvo/YWxleC5kdW5uQHZvbHZvLmNvbQ==
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
https://contactmonkey.com/api/v1/tracker?cm_session=6cb0d7b4-7514-49ed-a422-3EE1B3573A05&cs=d01410f1-e93a-498a-bdf9-aed95ac45c9b&cm_type=link&cm_link=c38d4278-31b3-4240-b05e-868db3a168a7&cm_destination=https://contactmonkey.com/api/v1/tracker?cm_session=78cba606-2264-447f-bc39-3EE1B3573Ac0&cs=825ad42b-2c78-40c6-8587-3b0541fc1564&cm_type=link&cm_link=0da11854-d710-40c4-8250-bcd92bcc7ee9&cm_destination=//ka7web.info/pub-a1ce42d361a04drr4r4ea122fb5e4f72.r2.dev/pub-a134deece2d361a04drr4r4ea1224f72.r2.dev/Volvo/YWxleC5kdW5uQHZvbHZvLmNvbQ==
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-