General
-
Target
https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqbFRtNUpRVDZ3dHNuY0poRmdDZl84c2Rkb0ZvUXxBQ3Jtc0trTWFjSWVJWVBVRWxwdXB4YnRscDJfUUVVakVDZnN4d1A3RGE2a0drV1hCTVlkWnRfMldrX2dseFBzMlFqYjRxM1A1dHBCTVlhZTY0d1BuTVZBMXZfSnhZMDJSWm96Vzk4aUp3eGtfcXlabmpLeDVSdw&q=https%3A%2F%2Frkns.link%2Fcagnq&v=VQRvTVyBUig
-
Sample
240824-243x8swgll
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqbFRtNUpRVDZ3dHNuY0poRmdDZl84c2Rkb0ZvUXxBQ3Jtc0trTWFjSWVJWVBVRWxwdXB4YnRscDJfUUVVakVDZnN4d1A3RGE2a0drV1hCTVlkWnRfMldrX2dseFBzMlFqYjRxM1A1dHBCTVlhZTY0d1BuTVZBMXZfSnhZMDJSWm96Vzk4aUp3eGtfcXlabmpLeDVSdw&q=https%3A%2F%2Frkns.link%2Fcagnq&v=VQRvTVyBUig
Resource
win11-20240802-en
Malware Config
Targets
-
-
Target
https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqbFRtNUpRVDZ3dHNuY0poRmdDZl84c2Rkb0ZvUXxBQ3Jtc0trTWFjSWVJWVBVRWxwdXB4YnRscDJfUUVVakVDZnN4d1A3RGE2a0drV1hCTVlkWnRfMldrX2dseFBzMlFqYjRxM1A1dHBCTVlhZTY0d1BuTVZBMXZfSnhZMDJSWm96Vzk4aUp3eGtfcXlabmpLeDVSdw&q=https%3A%2F%2Frkns.link%2Fcagnq&v=VQRvTVyBUig
Score6/10-
Legitimate hosting services abused for malware hosting/C2
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-