General
- Target https://chatgpt.com/accept-referral?referral_context=eyJyZWZlcnJhbF9pZCI6IjZhNzI4ZDUyY2IyYzgxOTFiMzQ3NmQwYmQ1OGY1ZWQ0IiwicmVmZXJyYWxfdHlwZSI6InBlcnNvbmFsX2NyZWRpdHMiLCJpbnZpdGVfcGFnZV9iZW5lZml0X3RleHQiOiIxMDAwIGNyZWRpdHMgZm9yIHlvdXIgYWNjb3VudCIsImhhc19yZXdhcmRzIjp0cnVlLCJlbWFpbF9yZWZlcnJlZF90byI6ImlhbWxhbWJlcnQyMDJAZ21haWwuY29tIiwid29ya3NwYWNlX2lkIjpudWxsLCJ3b3Jrc3BhY2VfbmFtZSI6bnVsbCwicmVkZW1wdGlvbl9hY3Rpb24iOiJjb2RleF90dXJuIn0&utm_campaign=utm_campaign&utm_content=utm_content&utm_medium=email&utm_source=sendgrid&utm_term=utm_term
- Sample260805-bkcntssxdx
Score
8/10
Malware Config
Targets
-
- Target https://chatgpt.com/accept-referral?referral_context=eyJyZWZlcnJhbF9pZCI6IjZhNzI4ZDUyY2IyYzgxOTFiMzQ3NmQwYmQ1OGY1ZWQ0IiwicmVmZXJyYWxfdHlwZSI6InBlcnNvbmFsX2NyZWRpdHMiLCJpbnZpdGVfcGFnZV9iZW5lZml0X3RleHQiOiIxMDAwIGNyZWRpdHMgZm9yIHlvdXIgYWNjb3VudCIsImhhc19yZXdhcmRzIjp0cnVlLCJlbWFpbF9yZWZlcnJlZF90byI6ImlhbWxhbWJlcnQyMDJAZ21haWwuY29tIiwid29ya3NwYWNlX2lkIjpudWxsLCJ3b3Jrc3BhY2VfbmFtZSI6bnVsbCwicmVkZW1wdGlvbl9hY3Rpb24iOiJjb2RleF90dXJuIn0&utm_campaign=utm_campaign&utm_content=utm_content&utm_medium=email&utm_source=sendgrid&utm_term=utm_term
Score8/10-
Downloads MZ/PE file
-
A potential corporate email address has been identified in the URL: [email protected]
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE