General
- Target https://mandrillapp.com/track/click/31455343/moldesparabalones.com?p=eyJzIjoiNnY1bHlhdmdvMks4RDE2Umhlem9VYzNoZHRjIiwidiI6MiwicCI6IntcInVcIjozMTQ1NTM0MyxcInZcIjoyLFwidXJsXCI6XCJodHRwczpcXFwvXFxcL21vbGRlc3BhcmFiYWxvbmVzLmNvbVxcXC9tYXRcXFwvXCIsXCJpZFwiOlwiMDZkYWJiMDJiZTM4NDFhZjliYjc3N2ZiYTdmMWRlYmJcIixcInVybF9pZHNcIjpbXCIxYjY1MWFiYTQxYmEzMTVmYWQ1Zjk4MGVjN2NhODc4NWUxMzkxODM5XCJdLFwibXNnX3RzXCI6MTc4NTc4NjEwNH0ifQ
- Sample260803-1aczaaga68
Score
6/10
Malware Config
Targets
-
- Target https://mandrillapp.com/track/click/31455343/moldesparabalones.com?p=eyJzIjoiNnY1bHlhdmdvMks4RDE2Umhlem9VYzNoZHRjIiwidiI6MiwicCI6IntcInVcIjozMTQ1NTM0MyxcInZcIjoyLFwidXJsXCI6XCJodHRwczpcXFwvXFxcL21vbGRlc3BhcmFiYWxvbmVzLmNvbVxcXC9tYXRcXFwvXCIsXCJpZFwiOlwiMDZkYWJiMDJiZTM4NDFhZjliYjc3N2ZiYTdmMWRlYmJcIixcInVybF9pZHNcIjpbXCIxYjY1MWFiYTQxYmEzMTVmYWQ1Zjk4MGVjN2NhODc4NWUxMzkxODM5XCJdLFwibXNnX3RzXCI6MTc4NTc4NjEwNH0ifQ
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Detected potential entity reuse from brand MICROSOFT.