General
-
Target
https://us-west-2.protection.sophos.com/?d=vercel.app&u=aHR0cHM6Ly9ldGl2LXRjYWVyLnZlcmNlbC5hcHA=&i=NWVjYjQ2MzZmNTgwNWIwZWJlZWZkM2Fl&t=OTVPMGtUcXk5NXhLUVNlYmR1amZjSTRudXlDT0crZVlTVkZlenlQRGdwOD0=&h=af4faa1f507546608c8d2367ff405a59&s=AVNPUEhUT0NFTkNSWVBUSVaefErLK28bWot2BtXhDsDphWNaci1tRbkInJTVTCRlcQ#ZXhhbXBsZUBvdXRsb29rLmNvbQ==
-
Sample
241120-lrrrfawamj
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://us-west-2.protection.sophos.com/?d=vercel.app&u=aHR0cHM6Ly9ldGl2LXRjYWVyLnZlcmNlbC5hcHA=&i=NWVjYjQ2MzZmNTgwNWIwZWJlZWZkM2Fl&t=OTVPMGtUcXk5NXhLUVNlYmR1amZjSTRudXlDT0crZVlTVkZlenlQRGdwOD0=&h=af4faa1f507546608c8d2367ff405a59&s=AVNPUEhUT0NFTkNSWVBUSVaefErLK28bWot2BtXhDsDphWNaci1tRbkInJTVTCRlcQ#ZXhhbXBsZUBvdXRsb29rLmNvbQ==
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
https://us-west-2.protection.sophos.com/?d=vercel.app&u=aHR0cHM6Ly9ldGl2LXRjYWVyLnZlcmNlbC5hcHA=&i=NWVjYjQ2MzZmNTgwNWIwZWJlZWZkM2Fl&t=OTVPMGtUcXk5NXhLUVNlYmR1amZjSTRudXlDT0crZVlTVkZlenlQRGdwOD0=&h=af4faa1f507546608c8d2367ff405a59&s=AVNPUEhUT0NFTkNSWVBUSVaefErLK28bWot2BtXhDsDphWNaci1tRbkInJTVTCRlcQ#ZXhhbXBsZUBvdXRsb29rLmNvbQ==
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-