URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://cmshotel.stay-app.com/sso/[email protected]&hash=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3MTgwMzI4NDUsImRhdGEiOiJuYXRoYWxpZS53ZWlkbWFubkByYWRpc3NvbmJsdS5jb218MTcxODYzNzY0NXxmYjY2ZWZjN2JhYWYyMjUxNTI1NjYzOWI4OGQzODExZGY1NzBjMjUxIiwiZXhwIjoxNzE4NjM3NjQ1fQ.-5Rv2aEaLN2gAbd2hIQndELehvfcFjvOLZnrs7p0NAo&action=activate
Resource
win10v2004-20240426-en
General
-
Target
https://cmshotel.stay-app.com/sso/[email protected]&hash=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3MTgwMzI4NDUsImRhdGEiOiJuYXRoYWxpZS53ZWlkbWFubkByYWRpc3NvbmJsdS5jb218MTcxODYzNzY0NXxmYjY2ZWZjN2JhYWYyMjUxNTI1NjYzOWI4OGQzODExZGY1NzBjMjUxIiwiZXhwIjoxNzE4NjM3NjQ1fQ.-5Rv2aEaLN2gAbd2hIQndELehvfcFjvOLZnrs7p0NAo&action=activate
Malware Config
Signatures
-
A potential corporate email address has been identified in the URL: [email protected]