hxxps://mibc-fr-07[.]mailinblack[.]com/securelink/?url=hxxps://atpscan[.]global[.]hornetsecurity[.]com&key=eyJsYW5nIjoiRlIiLCJ1cmwiOiJodHRwczovL2F0cHNjYW4uZ2xvYmFsLmhvcm5ldHNlY3VyaXR5LmNvbS8_ZD15V3JQM1JtWU5nMmJDSTEtTDJFd21OY19KVGZBSnlvbXZ2aVM2Q2hpaHozNUtFanFVSlR2cm92YjdHN1Nad2RwJmY9WUUwSWcyTjJzSlo4OWd4bmU1RzZiVVFqQTNMUDZ6N3BhZVRPR2hfbXROc2F5aEFRd3c5UjdJMlFmYlhGY1RfNyZpPSZrPU0zT2MmbT14SW96bzNIWkxrUnVOczdzcjE1bE92RXhCYXZRNzc5M0trbFFORUx6bDFpOTNzWXRRNDFRX181R3hpOEhfVnFPMTRENk11VVRxN2dUTV91eks0Y2lrcjQzQ1B4NlRnd2h6U0I5cGc0aEw5c1hDcGdrWW5aN0w5dVZhMmctcHFCZCZuPXZWUTBLZ2dzbzFHTVNIcUxrOXBGcHJRbGRoUHVscVEwMGJyNElhaEtXN0NEM2x5N2lSSWczbGQwUl9jM084VlltZTd6LTdMd2ZsQmM2T053TlhUUXlBJnI9Uy1NeTFUMU1HVkVNNDNFM3JtMTd2SnE2RTJ4bnpORndkbnBXUG4wQU9TbEVhdldmSml5UHVIYkxmS0RlS2NvbSZzPTg5Zjg2NjBhMGEzYTQ4YzM0ZjI0MzU3MzA5YjI3MGMzNThjMDBhYTcyODM3ZWY5NGVmODgwNjIxODI5OGY5ZWEmdT1odHRwcyUzQSUyRiUyRnVybC1zaGllbGQuc2VjdXJlbmNlLmNvbSUyRiUzRnAlM0QxLjElMjZhbXAlM0JyJTNEc3NlcHVsdmVkYSUyNTQweW1mbGF3LmNvbSUyNmFtcCUzQnNpZCUzRDE3ODQ5MDQyMjQ5MjctMDc3LTAwMDcyNTI5JTI2YW1wJTNCcyUzRHptN2N4d2ZtJTI2YW1wJTNCbiUzRGJ0Nmtqa2hoMyUyNmFtcCUzQm1zJTNEMy42JTI1MkMzLjYlMjUyQzAuMCUyNTJDMC4wJTI2YW1wJTNCdSUzRGh0dHBzJTI1M0ElMjUyRiUyNTJGc2VjdXJlLXdlYi5jaXNjby5jb20lMjUyRjFpLXhvLWo1bGt3M2RfUXEzYkFBazRMbF9ySDlKWWwteUhpWFQ2TkNHT3RiaV9aRXJIbFV3Z0tzLV9xcTRTQkM5aFoyOGFyVi10Z3dUTDJlWml3N1EwLTVneGhaekgwTFFjTXVzeGthSlpoWGtsNWM4YzhDUXJmX3F5cXh2SS0xQ045bzhGOW1OOG1uX1NtWE1tRDdFQ2lyYlJLOTQ0MTR3STVnV3NtSzhQYURqUTlNRldHWDg0eDNzT0E2UGZfWk1KQnRzRE9XVXRDRjBIaENCMHhTemw2dUFYYXZxaHdNLUVSNUszS0g4aVNhVEQ0VmlvSWw5ZlYtd0FZYV9acGVyZVRaODFlZ3lBS1dRUkdBdy1tbjVjUk1uSzV4UUpxNnp3SzY5eXJ1M0RTOUk1QVFpc3dSVHFFaFFveDNHVFktMGFtaG1iLUJxbFdicHdCNnYxdlF5OE4zSDg0VUNLU0VqMl84d29xOTRVWllTRnl1bWNQTVVRYU04blBIYzVzSVdLeTd1XzdHZk9OaWN1YU16bENlX0hNRWZ2Q0VKdVRWRlFVUjlKOVFjQ3VtU3ByT0xhY0UtZUQ3SzFYYlhHb3Y4Y1lVeHNYWkxtVUMxTkp4TXhhb3ZmUSUyNTJGaHR0cHMlMjUyNTNBJTI1MjUyRiUyNTI1MkZ0ZW5kZXJlZHVjYXRpb24uY29tJTI1MjUyRm1hY2dsaiIsInRva2VuIjoiZ0FBQUFBQnFZM3NDVVpNZzJ2UXY1dFRGQ25wXzRUbmVMdTVsUm1nVDM5dG9ILVhrak9YWGViUjhNalBCZ05wTEJ0RHBmaUdYd0dZd2d4ZjY5dzcwU01wOHNxc0t4dFFGZXhoM1JhWnlTNFI0NzhtbUVNUUVlbFNrNE0xRFNneTllNDZGWXNHcnkxWFhialpvZFlJaHI5NHR1MFR3YWdTNUlTWmlPdWVZLWVXRG94bUFXa29xU1dNcVFoX1pJelNHRFBzSGVkanZVSi1hUUJTOEFtbGtvMU9FblplcmdnckJLS095YVQxdTMwMlhjd3Y3eDlDUVdXemx6QVNCV29TRHU0VjNpTnc0YXhBTzlGM2JhUHd0WHB6NnUxWFhZbXVpN0pIcnZrMWQyd3g4Y1VScXh1UUFmWEFwbm5SbUgzdE9aSkoteWcydE0wMDAifQ==

Sharing

Copy URL Twitter E-mail

General

Target
https://mibc-fr-07.mailinblack.com/securelink/?url=https://atpscan.global.hornetsecurity.com&key=eyJsYW5nIjoiRlIiLCJ1cmwiOiJodHRwczovL2F0cHNjYW4uZ2xvYmFsLmhvcm5ldHNlY3VyaXR5LmNvbS8_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
Sample260819-ajf47atcka

Score

7^/10

discovery phishing

Behavioral task

behavioral1

Sample

https://mibc-fr-07.mailinblack.com/securelink/?url=https://atpscan.global.hornetsecurity.com&key=eyJsYW5nIjoiRlIiLCJ1cmwiOiJodHRwczovL2F0cHNjYW4uZ2xvYmFsLmhvcm5ldHNlY3VyaXR5LmNvbS8_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

Resource

win10v2004-20260513-en

windows10-2004-x64

13 signatures

150 seconds

discovery phishing

Malware Config

Targets

- Target
  https://mibc-fr-07.mailinblack.com/securelink/?url=https://atpscan.global.hornetsecurity.com&key=eyJsYW5nIjoiRlIiLCJ1cmwiOiJodHRwczovL2F0cHNjYW4uZ2xvYmFsLmhvcm5ldHNlY3VyaXR5LmNvbS8_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
Score

7^/10

discovery phishing
- A potential corporate email address has been identified in the URL: [email protected]
  phishing
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

7^/10

Sharing

General

Malware Config

Targets

A potential corporate email address has been identified in the URL: [email protected]

MITRE ATT&CK Enterprise v16

Tasks

static1

urlscan1

behavioral1