General
- Target https://hello.lyrahealth.com/api/mailings/click/PMRGSZBCHIZTGMZUGUYDGLBCOVZGYIR2EJUHI5DQOM5C6L3XO53S43DZOJQWQZLBNR2GQLTDN5WS64DMMF2GM33SNUXWGZLOORSXE4ZNN5TC2ZLYMNSWY3DFNZRWKL3OMV2XE33ENF3GK4TTNF2HSLZCFQRG64THEI5CEZLEGE2TQMJRMIWWCNRQMIWTINJVMUWWEYJXGYWTKNJZMRRTEMLBMVSWCOBCFQRHMZLSONUW63RCHIRDIIRMEJZWSZZCHIRDA4CQIV3HMOLBMVXWGWCNIFMGUX2WG5MDONCKINREMQSKNMYV6M2VGFTXGSJUJYYHQSRYHURH2===
- Sample260623-v7f5baey8z
Score
6/10
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://hello.lyrahealth.com/api/mailings/click/PMRGSZBCHIZTGMZUGUYDGLBCOVZGYIR2EJUHI5DQOM5C6L3XO53S43DZOJQWQZLBNR2GQLTDN5WS64DMMF2GM33SNUXWGZLOORSXE4ZNN5TC2ZLYMNSWY3DFNZRWKL3OMV2XE33ENF3GK4TTNF2HSLZCFQRG64THEI5CEZLEGE2TQMJRMIWWCNRQMIWTINJVMUWWEYJXGYWTKNJZMRRTEMLBMVSWCOBCFQRHMZLSONUW63RCHIRDIIRMEJZWSZZCHIRDA4CQIV3HMOLBMVXWGWCNIFMGUX2WG5MDONCKINREMQSKNMYV6M2VGFTXGSJUJYYHQSRYHURH2===
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target https://hello.lyrahealth.com/api/mailings/click/PMRGSZBCHIZTGMZUGUYDGLBCOVZGYIR2EJUHI5DQOM5C6L3XO53S43DZOJQWQZLBNR2GQLTDN5WS64DMMF2GM33SNUXWGZLOORSXE4ZNN5TC2ZLYMNSWY3DFNZRWKL3OMV2XE33ENF3GK4TTNF2HSLZCFQRG64THEI5CEZLEGE2TQMJRMIWWCNRQMIWTINJVMUWWEYJXGYWTKNJZMRRTEMLBMVSWCOBCFQRHMZLSONUW63RCHIRDIIRMEJZWSZZCHIRDA4CQIV3HMOLBMVXWGWCNIFMGUX2WG5MDONCKINREMQSKNMYV6M2VGFTXGSJUJYYHQSRYHURH2===
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.