URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://my.freshbooks.com/#/link/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzeXN0ZW1pZCI6MTU4ODY5MywidXNlcmlkIjo1MDg3NzAsInR5cGUiOiJpbnZvaWNlIiwib2JqZWN0aWQiOjQzODY3OTMsImV4cCI6MTc0ODQ2NDgyMCwibGV2ZWwiOjB9.FsuHB4KsHie4MtWhjrp5CGU-FHz287WqifXkUS_gEwY?companyName=Jason&invoiceNumber=04299&ownerEmail=thejay76%40gmail.com&type=primary
Resource
win11-20240426-en
General
-
Target
https://my.freshbooks.com/#/link/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzeXN0ZW1pZCI6MTU4ODY5MywidXNlcmlkIjo1MDg3NzAsInR5cGUiOiJpbnZvaWNlIiwib2JqZWN0aWQiOjQzODY3OTMsImV4cCI6MTc0ODQ2NDgyMCwibGV2ZWwiOjB9.FsuHB4KsHie4MtWhjrp5CGU-FHz287WqifXkUS_gEwY?companyName=Jason&invoiceNumber=04299&ownerEmail=thejay76%40gmail.com&type=primary
Malware Config
Signatures
-
A potential corporate email address has been identified in the URL: /link/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzeXN0ZW1pZCI6MTU4ODY5MywidXNlcmlkIjo1MDg3NzAsInR5cGUiOiJpbnZvaWNlIiwib2JqZWN0aWQiOjQzODY3OTMsImV4cCI6MTc0ODQ2NDgyMCwibGV2ZWwiOjB9.FsuHB4KsHie4MtWhjrp5CGU-FHz287WqifXkUS_gEwY?companyName=Jason&invoiceNumber=04299&[email protected]&type=primary