hxxps://api-03[.]moengage[.]com/v1/emailunsubscribe?wid=%40%24xy%2A%40%21h%C3%9A%25o%C2%96-%C3%AB87%2C%10%10%C3%96%C2%BE%C3%B68%C3%BF%C3%B5%C3%A2T%C3%AB6s%C3%AC%09%C3%89%C3%A2%C3%81%C2%9D%21m%C2%BB%C3%A1&xid=%40%24xy%2A%40%21h%C2%A8%40%C2%9B%C2%9B%2C%C3%9B%C3%A85W%C3%91%17%C2%BC%12%25%C3%80%3A%C3%84s%3EL%C2%94%C3%95%C3%99N%C2%BDt%C2%95%2A%C3%83%C3%AC%C2%BDO_%C2%AE%2F%C3%9BWi%C3%98%3B%C3%87%1F%C3%B9%1E%C2%AF5%12%C3%A8%7F%0E%C2%AE%C3%BB%3Cs%C2%BD%C3%B5Yi%C3%9C%40o%C3%A2%C2%A6%C2%ABw%C3%9EO%11%C2%89%C3%B0%26M%C2%95%C2%A4%C2%92v%C3%95%C2%89%C3%96%C3%A2%19%C2%9D%14-&yid=%40%24xy%2A%40%21hF%C3%9A%C2%A9%C2%91%3Al%C3%95c%04%C2%B6%C3%86%C3%9E%C2%AFB5N%06%19%C3%AFj%C3%A8%C2%A5V%C2%82%10%C2%9EU%0E%C3%9F%C2%95%09%3B&zid=Rachel[.]McMath@tceq[.]texas[.]gov&url=[//]67dogkhbb[.]cc[.]rs6[.]net/tn[.]jsp?f=0017J8IKQYVopizcfwSC9Kke_IRx7z9lKHwUytrQC79iJFXcd5yU7TFi-ZZBcYtyFYMID1C5wO1pAqKLdIDkJ5aBmdl8q-3qkhsFdYuscVnnYKbtZoSp9jSp9iiLlMI7Wk0TvTSRbQqS3xfNQyYPyT-j-x5z6pEJuzsIM8uJym5rfdkN5S51zWfqgvk64rbuUV75ElYmJZhmCSaaQN-fZuQ1XhwpYQ3xLToTbDjYvUsEYPJV6gxPP1XLpr_IS_2na5tGyiC8i5GPEj7-hqeSGe2zC_GFn90qCVNMKmI3huKUL5UfYR8CVICLB8DmwlVjrT42P0qNgY70dMu7QREbC0M7BI8yEvmnPZS3WdO8C4HSh9ljo9EBWwxrP7FAVEP7A-jOXcH0zDZwKsPyU2S3qQSncJK36o78l5VSJfgkCEc3W049J7tbxwEe_Cv2NcrR9Od-UpH4JbgHi3rWbW_5ylg0y3f_reEK1Rp3DmXsKoi_fAh0mLMrtKxyi4lXfkSt7uzsS9oLORfAJ4-LYWOiTx0hQSw0KkKBt4cgIYL6rzwnjJEgO3xKYlLFDcQnbdwJ9e81nrwU13fIUFlGIvWT4h7JJDFgQFv-9Ap2MQnswouOOc1GQ3MqFhhO4maicA_DHkaMiKAgtD1SVTGUWpYVX56HMyCP73giMVtGTN0Oxz5bYLUANKSM33uDfifUNTi6loNy7-uKCavZ8WdGu-2DTfI5pajDlLUH2TPdxjMCQXC0aXay4ERqfzJkUJ4AEOZ_bac75sFdOOg6VmJx0D7neRp69aNq1cnSo8GYhiZPSZvrdFpfvmR-VL_53wYpxhfP6JuGChabOwQ_3W9TAHtmuB2MZpKSkbJnxntMhkPQQd1GrLgF2HxtPKr3L-ivbAXpyyTvuTexT7MQctVzpbbxgCzRWbYgFC_h3Yrkpb6F0R3uFyWmGHxpJKRXorWQAuqDk7oIcuOAGoI9o9i2YKmF-ANrQLvTSX2bdmTVQsqLGoYG68b5RPqN13y66ARkWWzPKNen0BuGJIVgLEpcEegJGCZsQZWy7w1CFp2eYsLQnJKmVUA_eYZIxQs7LVMQ9LsRsQDD08w3KHe2GR_Lc1noEFPGnWPBFZQlRfWynu34RWPG9QC_G0Tl3pxPZD9u-gNRN6yoqQF9lejb3uJ44TvvRsAWGwmhN_dMf1U&c=2Gnz0gkzi3jvzY8HF5ZT9sqUhhXMb_O2v8dzkYaiaIwklHSe0xKEyg==&ch=Y8SC_qiL0ANj4SQpku5zU2AgzMnb5o9whhG84i3b4sbfuVTENdTvfQ==

Sharing

Behavioral task

behavioral1

Sample

https://api-03.moengage.com/v1/emailunsubscribe?wid=%40%24xy%2A%40%21h%C3%9A%25o%C2%96-%C3%AB87%2C%10%10%C3%96%C2%BE%C3%B68%C3%BF%C3%B5%C3%A2T%C3%AB6s%C3%AC%09%C3%89%C3%A2%C3%81%C2%9D%21m%C2%BB%C3%A1&xid=%40%24xy%2A%40%21h%C2%A8%40%C2%9B%C2%9B%2C%C3%9B%C3%A85W%C3%91%17%C2%BC%12%25%C3%80%3A%C3%84s%3EL%C2%94%C3%95%C3%99N%C2%BDt%C2%95%2A%C3%83%C3%AC%C2%BDO_%C2%AE%2F%C3%9BWi%C3%98%3B%C3%87%1F%C3%B9%1E%C2%AF5%12%C3%A8%7F%0E%C2%AE%C3%BB%3Cs%C2%BD%C3%B5Yi%C3%9C%40o%C3%A2%C2%A6%C2%ABw%C3%9EO%11%C2%89%C3%B0%26M%C2%95%C2%A4%C2%92v%C3%95%C2%89%C3%96%C3%A2%19%C2%9D%14-&yid=%40%24xy%2A%40%21hF%C3%9A%C2%A9%C2%91%3Al%C3%95c%04%C2%B6%C3%86%C3%9E%C2%AFB5N%06%19%C3%AFj%C3%A8%C2%A5V%C2%82%10%C2%9EU%0E%C3%9F%C2%95%09%3B&[email protected]&url=//67dogkhbb.cc.rs6.net/tn.jsp?f=0017J8IKQYVopizcfwSC9Kke_IRx7z9lKHwUytrQC79iJFXcd5yU7TFi-ZZBcYtyFYMID1C5wO1pAqKLdIDkJ5aBmdl8q-3qkhsFdYuscVnnYKbtZoSp9jSp9iiLlMI7Wk0TvTSRbQqS3xfNQyYPyT-j-x5z6pEJuzsIM8uJym5rfdkN5S51zWfqgvk64rbuUV75ElYmJZhmCSaaQN-fZuQ1XhwpYQ3xLToTbDjYvUsEYPJV6gxPP1XLpr_IS_2na5tGyiC8i5GPEj7-hqeSGe2zC_GFn90qCVNMKmI3huKUL5UfYR8CVICLB8DmwlVjrT42P0qNgY70dMu7QREbC0M7BI8yEvmnPZS3WdO8C4HSh9ljo9EBWwxrP7FAVEP7A-jOXcH0zDZwKsPyU2S3qQSncJK36o78l5VSJfgkCEc3W049J7tbxwEe_Cv2NcrR9Od-UpH4JbgHi3rWbW_5ylg0y3f_reEK1Rp3DmXsKoi_fAh0mLMrtKxyi4lXfkSt7uzsS9oLORfAJ4-LYWOiTx0hQSw0KkKBt4cgIYL6rzwnjJEgO3xKYlLFDcQnbdwJ9e81nrwU13fIUFlGIvWT4h7JJDFgQFv-9Ap2MQnswouOOc1GQ3MqFhhO4maicA_DHkaMiKAgtD1SVTGUWpYVX56HMyCP73giMVtGTN0Oxz5bYLUANKSM33uDfifUNTi6loNy7-uKCavZ8WdGu-2DTfI5pajDlLUH2TPdxjMCQXC0aXay4ERqfzJkUJ4AEOZ_bac75sFdOOg6VmJx0D7neRp69aNq1cnSo8GYhiZPSZvrdFpfvmR-VL_53wYpxhfP6JuGChabOwQ_3W9TAHtmuB2MZpKSkbJnxntMhkPQQd1GrLgF2HxtPKr3L-ivbAXpyyTvuTexT7MQctVzpbbxgCzRWbYgFC_h3Yrkpb6F0R3uFyWmGHxpJKRXorWQAuqDk7oIcuOAGoI9o9i2YKmF-ANrQLvTSX2bdmTVQsqLGoYG68b5RPqN13y66ARkWWzPKNen0BuGJIVgLEpcEegJGCZsQZWy7w1CFp2eYsLQnJKmVUA_eYZIxQs7LVMQ9LsRsQDD08w3KHe2GR_Lc1noEFPGnWPBFZQlRfWynu34RWPG9QC_G0Tl3pxPZD9u-gNRN6yoqQF9lejb3uJ44TvvRsAWGwmhN_dMf1U&c=2Gnz0gkzi3jvzY8HF5ZT9sqUhhXMb_O2v8dzkYaiaIwklHSe0xKEyg==&ch=Y8SC_qiL0ANj4SQpku5zU2AgzMnb5o9whhG84i3b4sbfuVTENdTvfQ==

Resource

win10v2004-20240709-en

windows10-2004-x64

9 signatures

600 seconds

General

Target

https://api-03.moengage.com/v1/emailunsubscribe?wid=%40%24xy%2A%40%21h%C3%9A%25o%C2%96-%C3%AB87%2C%10%10%C3%96%C2%BE%C3%B68%C3%BF%C3%B5%C3%A2T%C3%AB6s%C3%AC%09%C3%89%C3%A2%C3%81%C2%9D%21m%C2%BB%C3%A1&xid=%40%24xy%2A%40%21h%C2%A8%40%C2%9B%C2%9B%2C%C3%9B%C3%A85W%C3%91%17%C2%BC%12%25%C3%80%3A%C3%84s%3EL%C2%94%C3%95%C3%99N%C2%BDt%C2%95%2A%C3%83%C3%AC%C2%BDO_%C2%AE%2F%C3%9BWi%C3%98%3B%C3%87%1F%C3%B9%1E%C2%AF5%12%C3%A8%7F%0E%C2%AE%C3%BB%3Cs%C2%BD%C3%B5Yi%C3%9C%40o%C3%A2%C2%A6%C2%ABw%C3%9EO%11%C2%89%C3%B0%26M%C2%95%C2%A4%C2%92v%C3%95%C2%89%C3%96%C3%A2%19%C2%9D%14-&yid=%40%24xy%2A%40%21hF%C3%9A%C2%A9%C2%91%3Al%C3%95c%04%C2%B6%C3%86%C3%9E%C2%AFB5N%06%19%C3%AFj%C3%A8%C2%A5V%C2%82%10%C2%9EU%0E%C3%9F%C2%95%09%3B&[email protected]&url=//67dogkhbb.cc.rs6.net/tn.jsp?f=0017J8IKQYVopizcfwSC9Kke_IRx7z9lKHwUytrQC79iJFXcd5yU7TFi-ZZBcYtyFYMID1C5wO1pAqKLdIDkJ5aBmdl8q-3qkhsFdYuscVnnYKbtZoSp9jSp9iiLlMI7Wk0TvTSRbQqS3xfNQyYPyT-j-x5z6pEJuzsIM8uJym5rfdkN5S51zWfqgvk64rbuUV75ElYmJZhmCSaaQN-fZuQ1XhwpYQ3xLToTbDjYvUsEYPJV6gxPP1XLpr_IS_2na5tGyiC8i5GPEj7-hqeSGe2zC_GFn90qCVNMKmI3huKUL5UfYR8CVICLB8DmwlVjrT42P0qNgY70dMu7QREbC0M7BI8yEvmnPZS3WdO8C4HSh9ljo9EBWwxrP7FAVEP7A-jOXcH0zDZwKsPyU2S3qQSncJK36o78l5VSJfgkCEc3W049J7tbxwEe_Cv2NcrR9Od-UpH4JbgHi3rWbW_5ylg0y3f_reEK1Rp3DmXsKoi_fAh0mLMrtKxyi4lXfkSt7uzsS9oLORfAJ4-LYWOiTx0hQSw0KkKBt4cgIYL6rzwnjJEgO3xKYlLFDcQnbdwJ9e81nrwU13fIUFlGIvWT4h7JJDFgQFv-9Ap2MQnswouOOc1GQ3MqFhhO4maicA_DHkaMiKAgtD1SVTGUWpYVX56HMyCP73giMVtGTN0Oxz5bYLUANKSM33uDfifUNTi6loNy7-uKCavZ8WdGu-2DTfI5pajDlLUH2TPdxjMCQXC0aXay4ERqfzJkUJ4AEOZ_bac75sFdOOg6VmJx0D7neRp69aNq1cnSo8GYhiZPSZvrdFpfvmR-VL_53wYpxhfP6JuGChabOwQ_3W9TAHtmuB2MZpKSkbJnxntMhkPQQd1GrLgF2HxtPKr3L-ivbAXpyyTvuTexT7MQctVzpbbxgCzRWbYgFC_h3Yrkpb6F0R3uFyWmGHxpJKRXorWQAuqDk7oIcuOAGoI9o9i2YKmF-ANrQLvTSX2bdmTVQsqLGoYG68b5RPqN13y66ARkWWzPKNen0BuGJIVgLEpcEegJGCZsQZWy7w1CFp2eYsLQnJKmVUA_eYZIxQs7LVMQ9LsRsQDD08w3KHe2GR_Lc1noEFPGnWPBFZQlRfWynu34RWPG9QC_G0Tl3pxPZD9u-gNRN6yoqQF9lejb3uJ44TvvRsAWGwmhN_dMf1U&c=2Gnz0gkzi3jvzY8HF5ZT9sqUhhXMb_O2v8dzkYaiaIwklHSe0xKEyg==&ch=Y8SC_qiL0ANj4SQpku5zU2AgzMnb5o9whhG84i3b4sbfuVTENdTvfQ==

Score

8^/10

phishing

Malware Config

Signatures

A potential corporate email address has been identified in the URL: [email protected]
phishing

Sharing

General

Malware Config

Signatures

Files