hxxps://cas5-0-urlprotect[.]trendmicro[.]com/wis/clicktime/v1/query?url=https%3a%2f%2fsecure-web[.]cisco[.]com%2f1EuDGECiYYAHmvXg5f2x3IRwqvfuZ0D_Q2C5TTauDPwCQ8nkkPzf9-HpBJqP4VSgnw-K9XiGYraOFmEuo0cCgQjH8GGn-clClmWIn2O8_G1Lc9TgZWIEZILcqlf_makkGn8SOS-EJaBRJ5kMGkxTdem6o8FC_YL_o0GkAaT8tw7L0R30ldZb5z2zPWzq1Gwyofa-OrUJ1VBG3yhFLJmwM-nQfERwd0WtI5Pn8y_Md_uSInTgmqWxdEXXHf5Q_9FeERHgjXdF-uVo9cmiBR8nxOtNpPVCkEsNPDegw9AzufVbF9XOJ26-TReAMSdDZnOtumXApYiaxj9AvY-yzhfp-azAR1mpMJEk-2Bbdz0BVKNbFYQYLIzLSBgYAnuQfv4uThFITN8PB8dcyxjA94itqjSRrTULStFLUGkjtepljnt1owD5kk4p6Gpeox0VkCcEU0TF7OwUmYgcQRC6obfxvRA%2fhttps%253A%252F%252Fdonchilenergyservices[.]com%252F%252Fwp-admin%252Fcintact&umid=acee99a8-72c9-428e-9c1f-91839ee0d351&rct=1783647856&auth=9821b13eb0a9d0321096df9a38c2114dfa396172-851722dc9c33ebee810915e4f78f2551bd2d79fe/en/connexion/?token=qI4HpyzITMe8P67ph1YWNeMR8d9CqiPbviPj8IMXwYmkp937Fx%2Fmv9FfkZYbLt9d9fqcKUNZOAA6MHij4b%2FG8hHrOUtfOPXpl5SV%2BGFZkXWNkc35gSjcUD%2FX7dvioIQUstX0ZZANY%2BBiiPUbWtcWi92a0FSflzo8kVXjH7xMUkQbygLAVusuJHCHm1JG3vS7va%2FeUwmJOBSVFdnByB2FSg%3D%3D&redirect_to=hxxps://noki[.]artopex[.]com/en/envoi-du-code/hxxps://noki[.]artopex[.]com/en/connexion/?token=qI4HpyzITMe8P67ph1YWNeMR8d9CqiPbviPj8IMXwYmkp937Fx%2Fmv9FfkZYbLt9d9fqcKUNZOAA6MHij4b%2FG8hHrOUtfOPXpl5SV%2BGFZkXWNkc35gSjcUD%2FX7dvioIQUstX0ZZANY%2BBiiPUbWtcWi92a0FSflzo8kVXjH7xMUkQbygLAVusuJHCHm1JG3vS7va%2FeUwmJOBSVFdnByB2FSg%3D%3D&redirect_to=hxxps://noki[.]artopex[.]com/en/envoi-du-code/

Sharing

Target
https://cas5-0-urlprotect.trendmicro.com/wis/clicktime/v1/query?url=https%3a%2f%2fsecure-web.cisco.com%2f1EuDGECiYYAHmvXg5f2x3IRwqvfuZ0D_Q2C5TTauDPwCQ8nkkPzf9-HpBJqP4VSgnw-K9XiGYraOFmEuo0cCgQjH8GGn-clClmWIn2O8_G1Lc9TgZWIEZILcqlf_makkGn8SOS-EJaBRJ5kMGkxTdem6o8FC_YL_o0GkAaT8tw7L0R30ldZb5z2zPWzq1Gwyofa-OrUJ1VBG3yhFLJmwM-nQfERwd0WtI5Pn8y_Md_uSInTgmqWxdEXXHf5Q_9FeERHgjXdF-uVo9cmiBR8nxOtNpPVCkEsNPDegw9AzufVbF9XOJ26-TReAMSdDZnOtumXApYiaxj9AvY-yzhfp-azAR1mpMJEk-2Bbdz0BVKNbFYQYLIzLSBgYAnuQfv4uThFITN8PB8dcyxjA94itqjSRrTULStFLUGkjtepljnt1owD5kk4p6Gpeox0VkCcEU0TF7OwUmYgcQRC6obfxvRA%2fhttps%253A%252F%252Fdonchilenergyservices.com%252F%252Fwp-admin%252Fcintact&umid=acee99a8-72c9-428e-9c1f-91839ee0d351&rct=1783647856&auth=9821b13eb0a9d0321096df9a38c2114dfa396172-851722dc9c33ebee810915e4f78f2551bd2d79fe/en/connexion/?token=qI4HpyzITMe8P67ph1YWNeMR8d9CqiPbviPj8IMXwYmkp937Fx%2Fmv9FfkZYbLt9d9fqcKUNZOAA6MHij4b%2FG8hHrOUtfOPXpl5SV%2BGFZkXWNkc35gSjcUD%2FX7dvioIQUstX0ZZANY%2BBiiPUbWtcWi92a0FSflzo8kVXjH7xMUkQbygLAVusuJHCHm1JG3vS7va%2FeUwmJOBSVFdnByB2FSg%3D%3D&redirect_to=https://noki.artopex.com/en/envoi-du-code/https://noki.artopex.com/en/connexion/?token=qI4HpyzITMe8P67ph1YWNeMR8d9CqiPbviPj8IMXwYmkp937Fx%2Fmv9FfkZYbLt9d9fqcKUNZOAA6MHij4b%2FG8hHrOUtfOPXpl5SV%2BGFZkXWNkc35gSjcUD%2FX7dvioIQUstX0ZZANY%2BBiiPUbWtcWi92a0FSflzo8kVXjH7xMUkQbygLAVusuJHCHm1JG3vS7va%2FeUwmJOBSVFdnByB2FSg%3D%3D&redirect_to=https://noki.artopex.com/en/envoi-du-code/
Sample260717-ehel7aax2l

Score

3^/10

discovery

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact