General
- Target https://mandrillapp.com/track/click/31455343/moldesparabalones.com?p=eyJzIjoiNW95cWtVVlNURHRKMk5CTVBZZDdVdi02RUlRIiwidiI6MiwicCI6IntcInVcIjozMTQ1NTM0MyxcInZcIjoyLFwidXJsXCI6XCJodHRwczpcXFwvXFxcL21vbGRlc3BhcmFiYWxvbmVzLmNvbVxcXC9tYXRcXFwvXCIsXCJpZFwiOlwiZDYwZWI0ZTAxYzNjNGY4YzlmZTdhMzliMDM4MGZmNGNcIixcInVybF9pZHNcIjpbXCIxYjY1MWFiYTQxYmEzMTVmYWQ1Zjk4MGVjN2NhODc4NWUxMzkxODM5XCJdLFwibXNnX3RzXCI6MTc4NTc3ODIxMH0ifQ
- Sample260803-w7hhtahn71
Score
6/10
Malware Config
Targets
-
- Target https://mandrillapp.com/track/click/31455343/moldesparabalones.com?p=eyJzIjoiNW95cWtVVlNURHRKMk5CTVBZZDdVdi02RUlRIiwidiI6MiwicCI6IntcInVcIjozMTQ1NTM0MyxcInZcIjoyLFwidXJsXCI6XCJodHRwczpcXFwvXFxcL21vbGRlc3BhcmFiYWxvbmVzLmNvbVxcXC9tYXRcXFwvXCIsXCJpZFwiOlwiZDYwZWI0ZTAxYzNjNGY4YzlmZTdhMzliMDM4MGZmNGNcIixcInVybF9pZHNcIjpbXCIxYjY1MWFiYTQxYmEzMTVmYWQ1Zjk4MGVjN2NhODc4NWUxMzkxODM5XCJdLFwibXNnX3RzXCI6MTc4NTc3ODIxMH0ifQ
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Detected potential entity reuse from brand MICROSOFT.