General
- Target https://nts.embluemail.com/p/cl?s=-nrFXipcMNYPfp28IuaLPNgF1dXzaVuq&data=t9I7fLPRmVGA4Pe6yI0U3iMRLo5G82JO%2BB8L7T%2FB6p4l9q8emqEtieae9j%2FZIG172a55od8CwdPzew7Wk3zq%2FZsPd8yGv6xc%2F9LOCgWmwKI%3D!-!5!-!https%3A%2F%2FX7Z2EJ6RB.tabassumtravel.com/trkp1bocgohmiudzgqbsumHrjLdk/mendes/5A474675615778736279357559584E6A6157316C626E5276514756786457463062334A705957786C626D56795A326C684C6D4E766253356963673D3D
- Sample260703-x3wejsbw6r
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://nts.embluemail.com/p/cl?s=-nrFXipcMNYPfp28IuaLPNgF1dXzaVuq&data=t9I7fLPRmVGA4Pe6yI0U3iMRLo5G82JO%2BB8L7T%2FB6p4l9q8emqEtieae9j%2FZIG172a55od8CwdPzew7Wk3zq%2FZsPd8yGv6xc%2F9LOCgWmwKI%3D!-!5!-!https%3A%2F%2FX7Z2EJ6RB.tabassumtravel.com/trkp1bocgohmiudzgqbsumHrjLdk/mendes/5A474675615778736279357559584E6A6157316C626E5276514756786457463062334A705957786C626D56795A326C684C6D4E766253356963673D3D
Resource
win11-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target https://nts.embluemail.com/p/cl?s=-nrFXipcMNYPfp28IuaLPNgF1dXzaVuq&data=t9I7fLPRmVGA4Pe6yI0U3iMRLo5G82JO%2BB8L7T%2FB6p4l9q8emqEtieae9j%2FZIG172a55od8CwdPzew7Wk3zq%2FZsPd8yGv6xc%2F9LOCgWmwKI%3D!-!5!-!https%3A%2F%2FX7Z2EJ6RB.tabassumtravel.com/trkp1bocgohmiudzgqbsumHrjLdk/mendes/5A474675615778736279357559584E6A6157316C626E5276514756786457463062334A705957786C626D56795A326C684C6D4E766253356963673D3D
-
A potential corporate email address has been identified in the URL: [email protected]