General

  • Target

    http://secure-web.cisco.com/18wQx_5lH7i66uiybwDsvRK8PPmhsfw5J8N64IuNPGH2PW41-H7kizmYkEMXTKFdGCtTn47l_Mp37rFLvPzQDj1HR0950jTxVD2i5IHgilF_sECiCXpEnkpGyOWsOqMKEuPc0L1Pb-1HCOT0_09GtmOkf8WLxhptbyRH4FwkKZ3iDdaym-EW7dLMug39pBpoOR_GBWiO0uxOHpbeVwTElZQr_yVpfyzI5eB_JloUuzvffdWgKY8-uv3-BKrOcg_b7uIJV5V3iKD9pyFEnhnxC4X0m18nDYzhJaztbiQDo1KN3ap7rI7-PkpHF5x56xOehzyFLE5BjhgOMonCiyDAKXwwWipAlFYI_KDWULMY7IzO-0XVr6jiNfANxNBhjlTVMV-QXLEMSnQ54tmSttXszzW2nqkziqcP16kGXdGE1CUU6Q3Gz95dvH0Ru3k4tXJ11sMz5iW7pYeeoRsssIeliyQ/l88%3Amailto%3A1axc0dwxtaj1zl0gpoixdbqlwz5hpnvr8cdbj8%40bf06x.hubspotemail.net%3Fsubject%3Dunsubscribe709%3Ahttps%3A%2F%2Fwebmail.publicsectornetwork.com%2Fsubscription-preferences%2Fv2%2Funsubscribe-all%3Fdata%3DW2nXS-N30h-B7W43wRHW1-Vy9KW43CS0R4fHnZTW3VyFbP2TrqTTW2TdJ_h2TLGtRW1ZpH8k3ZWtM_W2w0gLl4txynZW2PsMrs41Vym1W2TQW4l3SPnMtW2RzjvR3j8zP5W4fQQFM3DVMf_W3H6wqN4cqnL1W4rkt9q25gZJtW34DV7F4pz8GKW1Z6JN82WxFSfW3jtBNw3_SLjQW3g8ggN1XdccnW2qQVlq38mnFpW1Vdq6H2vQnWCW32yVPL3XH_b8W47DHyf38fwVqW45FkC13F99HzW4tgPMS3zhR8YW4mFyKW4mqwy2W3d1rzW2-m_ZMW41sNzh3D-lhcW4mzMKh3R0dJ9W2PW3_-41yhmhW2WdSJq30Ks_8W43PlBw3H5gm6W2PDXNj3_LtMvW2FM5Hc4m9ZD8W3dt9dC2Hq1f7W3Z_TDt2CTZGbW30sjH02xZt_rW3LJ6Pw3g7tDkW4hMQhc2-qvV9W1Bg4083ND8RrW3BTPBJ2FsdtRW1NkcX62HXVS6W36lJC43yRRDSW30G9X43j61KCW3DMhXK2Frs9xW4psNmp2HDCfqW2HCQHf4pqF9PW2KY_kV1S2cqkW4hd3BF30dj9bf3jnZX504e

Score
8/10

Malware Config

Signatures

  • A potential corporate email address has been identified in the URL: l88mailto1axc0dwxtaj1zl0gpoixdbqlwz5hpnvr8cdbj8@bf06x.hubspotemail.netsubjectunsubscribe709https

Files