General
- Target https://login.hollowbook.cfd/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=639215093987564628.MTU5MTRjNDktMjY4YS00NjM4LTg4ZTktZjlmNThkNGQxMzhhY2U4ZmQ2MjItMzVkNy00MzE5LTkyM2QtOTUwOWJlZjI5OTU2&ui_locales=ko-KR&mkt=ko-KR&client-request-id=f64ecd1c-3ea4-44cf-94ed-0c9278587c52&state=frpdem_6zE49Y2JVtL8B4KAo_rb8TID5gz6i1g8W9kIzGP2tIlUPBqqvKtepqsNM5gRfhavKPCR1k04EZkhV8U6P_bL3bRUSPt4DF8oxbMneelaJnJdMqSv6UPp1LSSL9Ek0F4vkcsOm0b7rF7J0Ed4u23du5BUyvHB9wVcMYkO3p81rFCCRM-WnjALWSdn_OJ1n_h1MnqWG0ty7zbbRfuMqd7_zrL7dwIzgHMWPRmQOFPGpcW8NdDp75M91czI7U94D5_zw6BSiRjcPZlX2EO7M7vYE8PXLAXV9ZFigmZ3Ud0hRFcHn40HPotODLYayaPUr6WuEJ9F4f9NF69oKgyfIX0VZ1ZPQA-ksPrkztGnEKopam4FWi-lRfbjbpQhrMCSnRRfAFFUI46aJWrO2Iymkpxubxqn8CGR13LqM9w4&x-client-SKU=ID_NET8_0&x-client-ver=8.16.0.0#[email protected]
- Sample260805-hp8emafc57
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://login.hollowbook.cfd/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=639215093987564628.MTU5MTRjNDktMjY4YS00NjM4LTg4ZTktZjlmNThkNGQxMzhhY2U4ZmQ2MjItMzVkNy00MzE5LTkyM2QtOTUwOWJlZjI5OTU2&ui_locales=ko-KR&mkt=ko-KR&client-request-id=f64ecd1c-3ea4-44cf-94ed-0c9278587c52&state=frpdem_6zE49Y2JVtL8B4KAo_rb8TID5gz6i1g8W9kIzGP2tIlUPBqqvKtepqsNM5gRfhavKPCR1k04EZkhV8U6P_bL3bRUSPt4DF8oxbMneelaJnJdMqSv6UPp1LSSL9Ek0F4vkcsOm0b7rF7J0Ed4u23du5BUyvHB9wVcMYkO3p81rFCCRM-WnjALWSdn_OJ1n_h1MnqWG0ty7zbbRfuMqd7_zrL7dwIzgHMWPRmQOFPGpcW8NdDp75M91czI7U94D5_zw6BSiRjcPZlX2EO7M7vYE8PXLAXV9ZFigmZ3Ud0hRFcHn40HPotODLYayaPUr6WuEJ9F4f9NF69oKgyfIX0VZ1ZPQA-ksPrkztGnEKopam4FWi-lRfbjbpQhrMCSnRRfAFFUI46aJWrO2Iymkpxubxqn8CGR13LqM9w4&x-client-SKU=ID_NET8_0&x-client-ver=8.16.0.0#[email protected]
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral2
Sample
https://login.hollowbook.cfd/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=639215093987564628.MTU5MTRjNDktMjY4YS00NjM4LTg4ZTktZjlmNThkNGQxMzhhY2U4ZmQ2MjItMzVkNy00MzE5LTkyM2QtOTUwOWJlZjI5OTU2&ui_locales=ko-KR&mkt=ko-KR&client-request-id=f64ecd1c-3ea4-44cf-94ed-0c9278587c52&state=frpdem_6zE49Y2JVtL8B4KAo_rb8TID5gz6i1g8W9kIzGP2tIlUPBqqvKtepqsNM5gRfhavKPCR1k04EZkhV8U6P_bL3bRUSPt4DF8oxbMneelaJnJdMqSv6UPp1LSSL9Ek0F4vkcsOm0b7rF7J0Ed4u23du5BUyvHB9wVcMYkO3p81rFCCRM-WnjALWSdn_OJ1n_h1MnqWG0ty7zbbRfuMqd7_zrL7dwIzgHMWPRmQOFPGpcW8NdDp75M91czI7U94D5_zw6BSiRjcPZlX2EO7M7vYE8PXLAXV9ZFigmZ3Ud0hRFcHn40HPotODLYayaPUr6WuEJ9F4f9NF69oKgyfIX0VZ1ZPQA-ksPrkztGnEKopam4FWi-lRfbjbpQhrMCSnRRfAFFUI46aJWrO2Iymkpxubxqn8CGR13LqM9w4&x-client-SKU=ID_NET8_0&x-client-ver=8.16.0.0#[email protected]
Resource
android-x64-20260325-en
Behavioral task
behavioral3
Sample
https://login.hollowbook.cfd/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=639215093987564628.MTU5MTRjNDktMjY4YS00NjM4LTg4ZTktZjlmNThkNGQxMzhhY2U4ZmQ2MjItMzVkNy00MzE5LTkyM2QtOTUwOWJlZjI5OTU2&ui_locales=ko-KR&mkt=ko-KR&client-request-id=f64ecd1c-3ea4-44cf-94ed-0c9278587c52&state=frpdem_6zE49Y2JVtL8B4KAo_rb8TID5gz6i1g8W9kIzGP2tIlUPBqqvKtepqsNM5gRfhavKPCR1k04EZkhV8U6P_bL3bRUSPt4DF8oxbMneelaJnJdMqSv6UPp1LSSL9Ek0F4vkcsOm0b7rF7J0Ed4u23du5BUyvHB9wVcMYkO3p81rFCCRM-WnjALWSdn_OJ1n_h1MnqWG0ty7zbbRfuMqd7_zrL7dwIzgHMWPRmQOFPGpcW8NdDp75M91czI7U94D5_zw6BSiRjcPZlX2EO7M7vYE8PXLAXV9ZFigmZ3Ud0hRFcHn40HPotODLYayaPUr6WuEJ9F4f9NF69oKgyfIX0VZ1ZPQA-ksPrkztGnEKopam4FWi-lRfbjbpQhrMCSnRRfAFFUI46aJWrO2Iymkpxubxqn8CGR13LqM9w4&x-client-SKU=ID_NET8_0&x-client-ver=8.16.0.0#[email protected]
Resource
android-x64-arm64-20260325-en
Malware Config
Targets
-
- Target https://login.hollowbook.cfd/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=639215093987564628.MTU5MTRjNDktMjY4YS00NjM4LTg4ZTktZjlmNThkNGQxMzhhY2U4ZmQ2MjItMzVkNy00MzE5LTkyM2QtOTUwOWJlZjI5OTU2&ui_locales=ko-KR&mkt=ko-KR&client-request-id=f64ecd1c-3ea4-44cf-94ed-0c9278587c52&state=frpdem_6zE49Y2JVtL8B4KAo_rb8TID5gz6i1g8W9kIzGP2tIlUPBqqvKtepqsNM5gRfhavKPCR1k04EZkhV8U6P_bL3bRUSPt4DF8oxbMneelaJnJdMqSv6UPp1LSSL9Ek0F4vkcsOm0b7rF7J0Ed4u23du5BUyvHB9wVcMYkO3p81rFCCRM-WnjALWSdn_OJ1n_h1MnqWG0ty7zbbRfuMqd7_zrL7dwIzgHMWPRmQOFPGpcW8NdDp75M91czI7U94D5_zw6BSiRjcPZlX2EO7M7vYE8PXLAXV9ZFigmZ3Ud0hRFcHn40HPotODLYayaPUr6WuEJ9F4f9NF69oKgyfIX0VZ1ZPQA-ksPrkztGnEKopam4FWi-lRfbjbpQhrMCSnRRfAFFUI46aJWrO2Iymkpxubxqn8CGR13LqM9w4&x-client-SKU=ID_NET8_0&x-client-ver=8.16.0.0#[email protected]
Score1/10