URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://my.freshbooks.com/#/link/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzeXN0ZW1pZCI6Njk0MTIxOSwidXNlcmlkIjoyOTMzOTEsInR5cGUiOiJpbnZvaWNlIiwib2JqZWN0aWQiOjczMTQxNSwiZXhwIjoxNzYwMTc5Nzc2LCJsZXZlbCI6MH0.6d5l83ezVaDqqI1nRtrlqMSKmwEpdpkXpFM9HM4zsck?companyName=MSS&invoiceNumber=0000835&ownerEmail=colin%40mobilesignalsolutions.co.uk&type=primary
Resource
win10v2004-20241007-en
General
-
Target
https://my.freshbooks.com/#/link/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzeXN0ZW1pZCI6Njk0MTIxOSwidXNlcmlkIjoyOTMzOTEsInR5cGUiOiJpbnZvaWNlIiwib2JqZWN0aWQiOjczMTQxNSwiZXhwIjoxNzYwMTc5Nzc2LCJsZXZlbCI6MH0.6d5l83ezVaDqqI1nRtrlqMSKmwEpdpkXpFM9HM4zsck?companyName=MSS&invoiceNumber=0000835&ownerEmail=colin%40mobilesignalsolutions.co.uk&type=primary
Malware Config
Signatures
-
A potential corporate email address has been identified in the URL: /link/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzeXN0ZW1pZCI6Njk0MTIxOSwidXNlcmlkIjoyOTMzOTEsInR5cGUiOiJpbnZvaWNlIiwib2JqZWN0aWQiOjczMTQxNSwiZXhwIjoxNzYwMTc5Nzc2LCJsZXZlbCI6MH0.6d5l83ezVaDqqI1nRtrlqMSKmwEpdpkXpFM9HM4zsck?companyName=MSS&invoiceNumber=0000835&[email protected]&type=primary