General

  • Target

    http://secure-web.cisco.com/1BZX--TLXsv_7dPQb7vcY7YCJ27lVUPT9kWoFZU-QqtBVyubhE0W1bPAaRcj8tZoMKsBCCseTgutjPGYkOnAhTaGOzOe_KzNLwhWGQ65IGPnlH-ZIhhaVvAbzOAOyirpTNtyHTT-DJ8LKCwPz2Zi18nEqMPBekNlSoyZpTXbUUBAIlwwhCfR1tDBXaoQRnFfhuGzxW9iIRoLx0-d9H_3d8q8RqBx_ibrlgSrG1-rrM-o2Nl03_U1p9Bv9rfk5PtwP4zdCNJTLuMi1un1NHtQnG0wF4ldOPt3gbl3LdfYCd05WPi0OFLcEJHq_8JtSwdNRyZW1CcQkgjKBM3hxvidgesjXXo8ixYKTL1y_pUKbX1sPV7QbqQ1B0cd7y1zmq5qDAXtRHj1tYgEFm4x5rQo42Mmpxa25dLFEB7qm6iSd0YM/l84%3Amailto%3Aunsubscribe%40ai.d.mailin.fr%3Fsubject%3Dunsub-13xhh86lq5c5e3j%26body%3D13xhh86lq5c5e3j90%3Ahttps%3A%2F%2Fa01ci.r.a.d.sendibm1.com%2Fmk%2Fun%2Fli%2Fsh%2FWCPxRrWByckThlZYaB6WSN5Nfd5wHwZR%2FzkORNw52dpab87%3Ahttps%3A%2F%2Fa01ci.r.a.d.sendibm1.com%2Fmk%2Fun%2Fsh%2FWCPxRrWByckThlZYaB6WSN5Nfd5wHwZR%2FzkORNw52dpabe

Score
8/10

Malware Config

Signatures

  • A potential corporate email address has been identified in the URL: l84mailtounsubscribe@ai.d.mailin.frsubjectunsub13xhh86lq5c5e3jbody13xhh86lq5c5e3j90https

Files