hxxps://xml[.]heyhadgonehef[.]com/click2?i=NdctHjyt5fE_0&ci=4918474514364105562&j=rv%3Db%26ss%3D1400x900%26ws%3D800x600%26wp%3D0x0%26ce%3D0%26ck%3Djc%26cv%3D8649%26cs%3D0%26fr%3D1%26hc%3D0%26fl%3Dnull%26jv%3Dnull%26sc%3D24%26hr%3D50%26rf%3D%26lo%3Dfilter[.]servsserverz[.]com%26mb%3D0%26hb%3D0%26pl%3DWin32%26ua%3DMozilla%252F5[.]0%2B%28Windows%2BNT%2B10[.]0%253B%2BWin64%253B%2Bx64%29%2BAppleWebKit%252F537[.]36%2B%28KHTML%252C%2Blike%2BGecko%29%2BChrome%252F148[.]0[.]0[.]0%2BSafari%252F537[.]36%26nd%3D2%26to%3Dhttps%253A%252F%252Fembed[.]st%26wbd%3D1%26wbde%3D0%26sqm%3D0%26phj%3D0%26nmj%3D0%26sln%3D0%26es%3D0%26ln%3Den-US%252Cen%26lnl%3D2%26hsc%3D1%26frc%3D1%26dbt%3D0%26prb%3D20030107%26tz%3D-480%26hid%3D0%26mq%3D1%26my%3D32%26geo%3D1%26thx%3D0%26the%3D0%26ths%3D0%26cpc%3D%26ocp%3D%26hwc%3D16%26hrl%3D%26acd%3Dpppmp%26vcd%3Dnpp%26pal%3D5%26pai%3D1%26pli%3D1%26win%3D800x600%26wout%3D0x0%26wpof%3D0x0%26bcld%3D769x18%26scrp%3D0x0%26scrad%3D1400x900%26spd%3D24%26pxr%3D1%26sck%3D1%26ckl%3D0%26sls%3D1%26sss%3D1%26six%3D1%26sdb%3D0%26vvr%3DGoogle%2BInc[.]%2B%28Google%29%26vrd%3DANGLE%2B%28Google%252C%2BVulkan%2B1[.]3[.]0%2B%28SwiftShader%2BDevice%2B%28Subzero%29%2B%280x0000C0DE%29%29%252C%2BSwiftShader%2Bdriver%29%26cnvs%3D80808080%26pnt%3Dprompt%26bch%3D1%26blv%3D1%26mmd_ao%3D1%26mmd_ai%3D1%26mmd_vi%3D1

Sharing

Target
https://xml.heyhadgonehef.com/click2?i=NdctHjyt5fE_0&ci=4918474514364105562&j=rv%3Db%26ss%3D1400x900%26ws%3D800x600%26wp%3D0x0%26ce%3D0%26ck%3Djc%26cv%3D8649%26cs%3D0%26fr%3D1%26hc%3D0%26fl%3Dnull%26jv%3Dnull%26sc%3D24%26hr%3D50%26rf%3D%26lo%3Dfilter.servsserverz.com%26mb%3D0%26hb%3D0%26pl%3DWin32%26ua%3DMozilla%252F5.0%2B%28Windows%2BNT%2B10.0%253B%2BWin64%253B%2Bx64%29%2BAppleWebKit%252F537.36%2B%28KHTML%252C%2Blike%2BGecko%29%2BChrome%252F148.0.0.0%2BSafari%252F537.36%26nd%3D2%26to%3Dhttps%253A%252F%252Fembed.st%26wbd%3D1%26wbde%3D0%26sqm%3D0%26phj%3D0%26nmj%3D0%26sln%3D0%26es%3D0%26ln%3Den-US%252Cen%26lnl%3D2%26hsc%3D1%26frc%3D1%26dbt%3D0%26prb%3D20030107%26tz%3D-480%26hid%3D0%26mq%3D1%26my%3D32%26geo%3D1%26thx%3D0%26the%3D0%26ths%3D0%26cpc%3D%26ocp%3D%26hwc%3D16%26hrl%3D%26acd%3Dpppmp%26vcd%3Dnpp%26pal%3D5%26pai%3D1%26pli%3D1%26win%3D800x600%26wout%3D0x0%26wpof%3D0x0%26bcld%3D769x18%26scrp%3D0x0%26scrad%3D1400x900%26spd%3D24%26pxr%3D1%26sck%3D1%26ckl%3D0%26sls%3D1%26sss%3D1%26six%3D1%26sdb%3D0%26vvr%3DGoogle%2BInc.%2B%28Google%29%26vrd%3DANGLE%2B%28Google%252C%2BVulkan%2B1.3.0%2B%28SwiftShader%2BDevice%2B%28Subzero%29%2B%280x0000C0DE%29%29%252C%2BSwiftShader%2Bdriver%29%26cnvs%3D80808080%26pnt%3Dprompt%26bch%3D1%26blv%3D1%26mmd_ao%3D1%26mmd_ai%3D1%26mmd_vi%3D1
Sample260622-d5wcsagy3n

Score

3^/10

discovery

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact