Overview

overview

6

Static

static

1

URLScan

urlscan

1

https://trk.mengotom...

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target
    https://trk.mengotomars.com/ls/click?upn=u001.l3G3L-2BL-2FnMcKxFn6wpNcL-2F-2FAbAZAjkZ-2BbhTLtq9WFx6VCXfMn0PhmLF3Qr4olTVSI-2FUBl5-2BPXFpnEskVCz1WrF1RixFhnxRIgYwloLdF60BG-2BYQm89HNOR8ByL7HxRBXikVq8tcxXY-2FU78OjoPoFgKhFkD5oJkXhSZDh2XBhBREy04iyJYz79fSv0yU1eznXd8vlJSBo6BnkxszgmD-2F5xMJ3cNr1Xl0yHkt6tI4JxRK2fnrSJb11zPWgGcr3kvHWX4pL62zkZnMWPY64YxCabWsjiN15WnfTBEfjXiOiLhkCNRRRXvhst7WvFseojbRnidCfGWMulLfv31ALlvM-2BFw-3D-3DFJgh_XK-2B3ikvfraAT9pzcpVMILvvuY-2FbPeHqQA0Ezdm1o6raAGrIRVNB2NduIQbELy-2Fie-2F9cApGs51nb3-2BOKpDyZaMzMM-2FQ5CZo-2B9aaWm7jNb7DeNgdQZ5sSkSZvyfn-2BFijomH1gQoQDHpZxVf4yV2AvaQ-2F-2Bg1x-2F2ia7hqZLB756Xxfb6SOaRfl4kBNiurb524ki7niCSx-2FPXFOabcRmm2DOS74uhJTLfmuCZOGl59u0hkYC5bfTZ-2B15ItE-2FuRBziSelArJo8iY1sr075miRndaZJBXH1WZ0RFj9K9CkP12TJk8OH1wp4J14-2Fy6QofxRAP4Ml5djgMPHiv6pFLMp8c0eHOnVVunNWptD99b7xbsI-2B85gfPITwoMA4PggSkzFNMEgRuJUbIboBUf09wHz05kCCqZqKWhkzjCEfpB8s3AitjGP3CAF6N4binV0jnunKW-2FPAEtoY6v8ufE-2F02y7hoBR4aDES7cmYdFVLcLVmlMjXBP3kI5rufHQR0vQwsjAyB-2BVj8-2Ft-2BCdoQaIywIjO2IpLWZRWT8HM3ezRC0bt0UxtmkpgFrKN8-2FM5gUXogVBqR-2F2OOyB2zdKrFZ7CHBI6PDSbaBQ-3D-3D
  • Sample260811-xbpspayfra
Score
6/10
discovery

Malware Config

Targets

    • Target
      https://trk.mengotomars.com/ls/click?upn=u001.l3G3L-2BL-2FnMcKxFn6wpNcL-2F-2FAbAZAjkZ-2BbhTLtq9WFx6VCXfMn0PhmLF3Qr4olTVSI-2FUBl5-2BPXFpnEskVCz1WrF1RixFhnxRIgYwloLdF60BG-2BYQm89HNOR8ByL7HxRBXikVq8tcxXY-2FU78OjoPoFgKhFkD5oJkXhSZDh2XBhBREy04iyJYz79fSv0yU1eznXd8vlJSBo6BnkxszgmD-2F5xMJ3cNr1Xl0yHkt6tI4JxRK2fnrSJb11zPWgGcr3kvHWX4pL62zkZnMWPY64YxCabWsjiN15WnfTBEfjXiOiLhkCNRRRXvhst7WvFseojbRnidCfGWMulLfv31ALlvM-2BFw-3D-3DFJgh_XK-2B3ikvfraAT9pzcpVMILvvuY-2FbPeHqQA0Ezdm1o6raAGrIRVNB2NduIQbELy-2Fie-2F9cApGs51nb3-2BOKpDyZaMzMM-2FQ5CZo-2B9aaWm7jNb7DeNgdQZ5sSkSZvyfn-2BFijomH1gQoQDHpZxVf4yV2AvaQ-2F-2Bg1x-2F2ia7hqZLB756Xxfb6SOaRfl4kBNiurb524ki7niCSx-2FPXFOabcRmm2DOS74uhJTLfmuCZOGl59u0hkYC5bfTZ-2B15ItE-2FuRBziSelArJo8iY1sr075miRndaZJBXH1WZ0RFj9K9CkP12TJk8OH1wp4J14-2Fy6QofxRAP4Ml5djgMPHiv6pFLMp8c0eHOnVVunNWptD99b7xbsI-2B85gfPITwoMA4PggSkzFNMEgRuJUbIboBUf09wHz05kCCqZqKWhkzjCEfpB8s3AitjGP3CAF6N4binV0jnunKW-2FPAEtoY6v8ufE-2F02y7hoBR4aDES7cmYdFVLcLVmlMjXBP3kI5rufHQR0vQwsjAyB-2BVj8-2Ft-2BCdoQaIywIjO2IpLWZRWT8HM3ezRC0bt0UxtmkpgFrKN8-2FM5gUXogVBqR-2F2OOyB2zdKrFZ7CHBI6PDSbaBQ-3D-3D
    Score
    6/10
    discovery

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks