General
- Target https://l13onayfhdaofnwtaecyxx1zcvm9dkmtob6gtsso70wytx6qom.click.kit-mail3.com/n4unevzv27cvhx74gndb6h677voq2flhmd957/reh8hohmglwn8zh2h6/aHR0cHM6Ly9pbmZva2FwLmNvbS5ici93b3VtYXJl#kjiGx=ZGlvZ28uY291dG9AZmFyZmV0Y2guY29t
- Sample260812-rx6ensw1ht
Score
7/10
Malware Config
Targets
-
- Target https://l13onayfhdaofnwtaecyxx1zcvm9dkmtob6gtsso70wytx6qom.click.kit-mail3.com/n4unevzv27cvhx74gndb6h677voq2flhmd957/reh8hohmglwn8zh2h6/aHR0cHM6Ly9pbmZva2FwLmNvbS5ici93b3VtYXJl#kjiGx=ZGlvZ28uY291dG9AZmFyZmV0Y2guY29t
Score7/10-
A potential corporate email address has been identified in the URL: [email protected]
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.