hxxps://tn3270[.]myabilitynetwork[.]com/activex/ab3270[.]application?sesHost=stream[.]ses[.]visionshareinc[.]com&sesPort=443&sesConnectionId=connection-629&connectTimeout=60&readTimeout=30&model=IBM-3278-4-E&authToken=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6ImhKaWl0TzFheHpmN3dTa0hfel9LTUF5MDF4USJ9[.]eyJpc3MiOiJBYmlsaXR5TmV0d29yayIsImF1ZCI6Imh0dHA6Ly9hYmlsaXR5bmV0d29yay5jb20iLCJleHAiOjE3MTg5MDI0ODYsIm5iZiI6MTcxODkwMTg4NiwiQ3JtQWNjb3VudE51bWJlciI6IjE1OTQxIiwiQ29ycmVsYXRpb25JZCI6IjRiODU2MTRiLTcxNzUtNDA4NS05NjY4LTJjYjcyNmVlOTEyMCIsImxhdW5jaFR5cGUiOiIyIiwic3ViIjoic29rbGVuZy5uYXdhekBoc2MudXRhaC5lZHUiLCJVc2VySWQiOiI0MjJkNzk2Ni00NzFhLTQ1MTctOGQ1OC02OTI0MjkzYzI0YjEiLCJMb2dpblR5cGUiOiJEaXJlY3QifQ[.]I4t85J2lSh2bidk2SK_TfEVMfTsatBhJng3SnHsIeUzmwZAmaMcH6R4rVaDuV7sOsxcWZfiuK0YDRmewN4wZEcrUkGBilqyGIK4QTWX7YlbOWMNo5OuZdrSbX9DXOglWae4ejCniGM-xP8nmHffPLhvnskE2nlgznbxfxQ3U_A6Vh2hPVPW-18BWqV8hAbXQgbcPaOe9jjM-BElbihb4RICuErXHggIyul4bLmDp4Cay5u8_O7AO7fSDFbmfKLBQSny1GUtEkcvrmf3cr-BL5rmb0NeFgyYEocAtet2U2spfqAyCuauDMcll8J3NMjJ_SzzRxOXNIV5jbeNAbijawQ

General

Target

https://tn3270.myabilitynetwork.com/activex/ab3270.application?sesHost=stream.ses.visionshareinc.com&sesPort=443&sesConnectionId=connection-629&connectTimeout=60&readTimeout=30&model=IBM-3278-4-E&authToken=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6ImhKaWl0TzFheHpmN3dTa0hfel9LTUF5MDF4USJ9.eyJpc3MiOiJBYmlsaXR5TmV0d29yayIsImF1ZCI6Imh0dHA6Ly9hYmlsaXR5bmV0d29yay5jb20iLCJleHAiOjE3MTg5MDI0ODYsIm5iZiI6MTcxODkwMTg4NiwiQ3JtQWNjb3VudE51bWJlciI6IjE1OTQxIiwiQ29ycmVsYXRpb25JZCI6IjRiODU2MTRiLTcxNzUtNDA4NS05NjY4LTJjYjcyNmVlOTEyMCIsImxhdW5jaFR5cGUiOiIyIiwic3ViIjoic29rbGVuZy5uYXdhekBoc2MudXRhaC5lZHUiLCJVc2VySWQiOiI0MjJkNzk2Ni00NzFhLTQ1MTctOGQ1OC02OTI0MjkzYzI0YjEiLCJMb2dpblR5cGUiOiJEaXJlY3QifQ.I4t85J2lSh2bidk2SK_TfEVMfTsatBhJng3SnHsIeUzmwZAmaMcH6R4rVaDuV7sOsxcWZfiuK0YDRmewN4wZEcrUkGBilqyGIK4QTWX7YlbOWMNo5OuZdrSbX9DXOglWae4ejCniGM-xP8nmHffPLhvnskE2nlgznbxfxQ3U_A6Vh2hPVPW-18BWqV8hAbXQgbcPaOe9jjM-BElbihb4RICuErXHggIyul4bLmDp4Cay5u8_O7AO7fSDFbmfKLBQSny1GUtEkcvrmf3cr-BL5rmb0NeFgyYEocAtet2U2spfqAyCuauDMcll8J3NMjJ_SzzRxOXNIV5jbeNAbijawQ
Sample

240620-vl1a3aseqr

Score

8^/10

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact