General
- Target https://e-eu.customeriomail.com/e/c/eyJlIjoyMjgxNzcsImVtYWlsX2lkIjoiZXhhbXBsZSIsImhyZWYiOiJodHRwczovLzdjdzR0MDE3LnIuZXUtbm9ydGgtMS5hd3N0cmFjay5tZS9MMC9odHRwczolMkYlMkZtYWlsOC5sb25kb3Mub25saW5lJTJGM3h6JTJGaW5kZXguaHRtbC8xLzAxMTAwMTlkMzlhZGI3NjktODFlNzA4MGUtODc3MS00MjhlLWI2MDUtNDI4YzBhNDBhNmVmLTAwMDAwMC9fRXZVV3dEM0szN3hnR1lMV2JHczVpUkpNUVk9MjU2P3V0bV9jYW1wYWlnbj1VbnRpdGxlZCtBdXRvbWF0aW9uKzFcdTAwMjZ1dG1fY29udGVudD1XZWxjb21lK3RvK015QXBwXHUwMDI2dXRtX21lZGl1bT1lbWFpbF9hY3Rpb25cdTAwMjZ1dG1fc291cmNlPWN1c3RvbWVyLmlvIiwidCI6MTc4NTgxNzIzM30/3799f54379716b099fc33d5ad4fec71b766d0a879388054e5a2d1a966c0b7da3#YWxldHRpZmlkdWNpYXJpYUBwZWMuYWxldHRpZmlkdWNpYXJpYS5pdA==&page=_docusign&pcnt=3
- Sample260804-qg9lqa1fkc
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://e-eu.customeriomail.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#YWxldHRpZmlkdWNpYXJpYUBwZWMuYWxldHRpZmlkdWNpYXJpYS5pdA==&page=_docusign&pcnt=3
Resource
win10v2004-20260513-en
Malware Config
Targets
-
- Target https://e-eu.customeriomail.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#YWxldHRpZmlkdWNpYXJpYUBwZWMuYWxldHRpZmlkdWNpYXJpYS5pdA==&page=_docusign&pcnt=3
-
A potential corporate email address has been identified in the URL: [email protected]