hxxps://mibc-fr-07[.]mailinblack[.]com/protect/securelink?url=hXXps[:]%2F%2Fatpscan[.]global[.]hornetsecurity[.]com&key=eyJsYW5nIjoiRlIiLCJ1cmwiOiJodHRwczovL2F0cHNjYW4uZ2xvYmFsLmhvcm5ldHNlY3VyaXR5LmNvbS8_ZD16RzcxU255bm5Zem9aZHdsdExwZWVCbWYzRkhpSWhsMVJPMERKbmRXaXU5Tjk0RUtqV0dCZ2tGQW5mN2JTTlVwJmY9SmZ6dlhnS0dXdjhQY0UwZHF2ZFEzZUdlWDFzZUhSRnNhcTI1Qk1uNnIyNkNHay04cndidjJuTTlqbHVTN2JJNyZpPSZrPVRHN0cmbT1nX0h4dEhXMm4xRHM4U0RLdFlsNXJGR3VKLXNhTWJYb29PZEdyTGE0OGdPbnRGSjI5ZGlhcmFhQnNtVWlNWl9EYVhtZ2RjeFZ6aWlzNG5OdmM0SWNacld6MXlhUmt2VlpISDF0YklHNFh6SWZkM20xdFMxWkpuZzMxdHJvc0ZncCZuPXp1NEpJQjluVHFCOEZlVGtSQlkxMEdWQUozTHdpY1hfdF9IV0RodzdmOGJPTWRPTkZyck1SSy1DckE5LVRpbk13VTdvX2NnbENwM1Vval9HSXdEejBBJnI9MHp0M0RORjQyM3BZRmpKbzBLOS04M0VtcXZ3cTVWejhlQ2lhS0tWV1NnRGV0NXBQdU43a0FTWENRdWQwUGx4NCZzPTlmNTJkZjAwYzNiZDZjYzE3OTQ5OTc1MTBjZDEzZDZlMjU5Y2ZkMTcwMjM5ZmRkZDNhMGE4NDg5YzA3MjViODUmdT1odHRwcyUzQSUyRiUyRnVybC1zaGllbGQuc2VjdXJlbmNlLmNvbSUyRiUzRnAlM0QxLjElMjZhbXAlM0JyJTNEc3NlcHVsdmVkYSUyNTQweW1mbGF3LmNvbSUyNmFtcCUzQnNpZCUzRDE3ODUzNDU3MDc4OTItMDkyLTAwMDA0NDA1JTI2YW1wJTNCcyUzRDJzcXlubHh4JTI2YW1wJTNCbiUzRGJ0NnhvbGdjZiUyNmFtcCUzQm1zJTNEMC4wJTI1MkMwLjAlMjUyQzAuMCUyNTJDMC4wJTI2YW1wJTNCdSUzRGh0dHBzJTI1M0ElMjUyRiUyNTJGZ3VlLWJlLmJlJTI1MkZ3b3JrbGQlMjUyRiIsInRva2VuIjoiZ0FBQUFBQnFhamRyYXpEMmpaSjNydFlOZzhvQVR0N3JZSVlMMkhJSUlndG5jUUljSWg2ZWNfUGdvRDczUFRsWTZUU3ZiOWZRZmpOZlpObXdCQjJnemNaUVVSVTZpZ09zVEl5V3ZwX3ZGaFotWEFRTktHdlNhNzlWck5aZUdBZGczdkl4VXotbWJCMy1INVZVaDczbXRMM2g5UTc4aEJIVmgxVU9CcU56T0xxQi1CQllSY1M1Xy1pS2VYaS1mUGVERURTb3REczRIVUg1aGlETnlUUklhUmpRVENCcm1vNUVvbFcza1lkclE1aDI2bmJYUkpYOTYyZUdtdmRLUVhOVmQ2cDRlUWNuUzJtSXZTR05VaG9fMHZsQlhnUzRPSmJ6RXRIMTNBcmU4SWhiMjNBeUdCNmRlZmhzVDNhMEJ3Y0RXVEdfZzNvOVU0Q1gifQ%3D%3D

Sharing

Copy URL Twitter E-mail

General

Target
https://mibc-fr-07.mailinblack.com/protect/securelink?url=hXXps:%2F%2Fatpscan.global.hornetsecurity.com&key=eyJsYW5nIjoiRlIiLCJ1cmwiOiJodHRwczovL2F0cHNjYW4uZ2xvYmFsLmhvcm5ldHNlY3VyaXR5LmNvbS8_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%3D%3D
Sample260730-bnm9qswfqa

Score

7^/10

Behavioral task

behavioral1

Sample

https://mibc-fr-07.mailinblack.com/protect/securelink?url=hXXps:%2F%2Fatpscan.global.hornetsecurity.com&key=eyJsYW5nIjoiRlIiLCJ1cmwiOiJodHRwczovL2F0cHNjYW4uZ2xvYmFsLmhvcm5ldHNlY3VyaXR5LmNvbS8_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%3D%3D

Resource

win10v2004-20260513-en

windows10-2004-x64

12 signatures

150 seconds

discovery persistence phishing privilege_escalation

Malware Config

Targets

- Target
  https://mibc-fr-07.mailinblack.com/protect/securelink?url=hXXps:%2F%2Fatpscan.global.hornetsecurity.com&key=eyJsYW5nIjoiRlIiLCJ1cmwiOiJodHRwczovL2F0cHNjYW4uZ2xvYmFsLmhvcm5ldHNlY3VyaXR5LmNvbS8_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%3D%3D
Score

7^/10

discovery persistence phishing privilege_escalation
- A potential corporate email address has been identified in the URL: [email protected]
  phishing
behavioral1