General
- Target https://atpscan.global.hornetsecurity.com/?d=6kvyvAoOY49WfO3P_-rAfPNxPf96rF667McncCy110s2eFdMnpHfY31XbP-EpZl0&f=SC5zWsFy2rJaS42xXV980RO1LgSuxmZayeb-Zi3nVkafH6Dr_IK-e8jzp1_dgtNi&i=&k=gNZL&m=5qpgE_r2UOyHol0cZ01vXNlbsfVAPk8OhjbM9zAL0AhRUHY-b3Xu0ae53LlCzSyDeGc59qyFt5fHIZPOd4RNhGWuUWx4ZjVodOM4CGkYFAxJljsKtRJ5dsz67i8eSckd&n=7LlRYQo2zowKvgBitO16IYNT-v839vZqGYAVD7qXc8QWOQ-7i_WQKRkyRYPEr-1B9ZY0v1D8-AgrmY98t8V2Er-ey36seBTB5MytN2jK-KQ&r=y4K-t-FT42n5SDDERbKVS0Lj2Flsv9814UxUT-dyEoGOfy5NnLGiy5s9KEvApu6s&s=2d4ef001c8a36ee0b3e5b2dd8585cafedc3bc0f0ee09a0f191db35c222748995&u=https%3A%2F%2Furl-shield.securence.com%2F%3Fp%3D1.1%26amp%3Br%3Dssepulveda%2540ymflaw.com%26amp%3Bsid%3D1785331939368-031-00067646%26amp%3Bs%3Dqi3z4b6j%26amp%3Bn%3Dbt6xbhame%26amp%3Bms%3D3.6%252C3.6%252C0.0%252C0.0%26amp%3Bu%3Dhttps%253A%252F%252Fetrecruitment.com.au%252Fdocs%252F
- Sample260730-k32kcaeg66
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://atpscan.global.hornetsecurity.com/?d=6kvyvAoOY49WfO3P_-rAfPNxPf96rF667McncCy110s2eFdMnpHfY31XbP-EpZl0&f=SC5zWsFy2rJaS42xXV980RO1LgSuxmZayeb-Zi3nVkafH6Dr_IK-e8jzp1_dgtNi&i=&k=gNZL&m=5qpgE_r2UOyHol0cZ01vXNlbsfVAPk8OhjbM9zAL0AhRUHY-b3Xu0ae53LlCzSyDeGc59qyFt5fHIZPOd4RNhGWuUWx4ZjVodOM4CGkYFAxJljsKtRJ5dsz67i8eSckd&n=7LlRYQo2zowKvgBitO16IYNT-v839vZqGYAVD7qXc8QWOQ-7i_WQKRkyRYPEr-1B9ZY0v1D8-AgrmY98t8V2Er-ey36seBTB5MytN2jK-KQ&r=y4K-t-FT42n5SDDERbKVS0Lj2Flsv9814UxUT-dyEoGOfy5NnLGiy5s9KEvApu6s&s=2d4ef001c8a36ee0b3e5b2dd8585cafedc3bc0f0ee09a0f191db35c222748995&u=https%3A%2F%2Furl-shield.securence.com%2F%3Fp%3D1.1%26amp%3Br%3Dssepulveda%2540ymflaw.com%26amp%3Bsid%3D1785331939368-031-00067646%26amp%3Bs%3Dqi3z4b6j%26amp%3Bn%3Dbt6xbhame%26amp%3Bms%3D3.6%252C3.6%252C0.0%252C0.0%26amp%3Bu%3Dhttps%253A%252F%252Fetrecruitment.com.au%252Fdocs%252F
Resource
win10v2004-20260513-en
Malware Config
Targets
-
- Target https://atpscan.global.hornetsecurity.com/?d=6kvyvAoOY49WfO3P_-rAfPNxPf96rF667McncCy110s2eFdMnpHfY31XbP-EpZl0&f=SC5zWsFy2rJaS42xXV980RO1LgSuxmZayeb-Zi3nVkafH6Dr_IK-e8jzp1_dgtNi&i=&k=gNZL&m=5qpgE_r2UOyHol0cZ01vXNlbsfVAPk8OhjbM9zAL0AhRUHY-b3Xu0ae53LlCzSyDeGc59qyFt5fHIZPOd4RNhGWuUWx4ZjVodOM4CGkYFAxJljsKtRJ5dsz67i8eSckd&n=7LlRYQo2zowKvgBitO16IYNT-v839vZqGYAVD7qXc8QWOQ-7i_WQKRkyRYPEr-1B9ZY0v1D8-AgrmY98t8V2Er-ey36seBTB5MytN2jK-KQ&r=y4K-t-FT42n5SDDERbKVS0Lj2Flsv9814UxUT-dyEoGOfy5NnLGiy5s9KEvApu6s&s=2d4ef001c8a36ee0b3e5b2dd8585cafedc3bc0f0ee09a0f191db35c222748995&u=https%3A%2F%2Furl-shield.securence.com%2F%3Fp%3D1.1%26amp%3Br%3Dssepulveda%2540ymflaw.com%26amp%3Bsid%3D1785331939368-031-00067646%26amp%3Bs%3Dqi3z4b6j%26amp%3Bn%3Dbt6xbhame%26amp%3Bms%3D3.6%252C3.6%252C0.0%252C0.0%26amp%3Bu%3Dhttps%253A%252F%252Fetrecruitment.com.au%252Fdocs%252F
Score7/10-
A potential corporate email address has been identified in the URL: [email protected]
-
Drops desktop.ini file(s)