General
- Target https://mandrillapp.com/track/click/30701172/headrume.com?p=eyJzIjoid3F1eklLU3U1V1dtY3hIUVBpOXVLUGlfbTl3IiwidiI6MiwicCI6IntcInVcIjozMDcwMTE3MixcInZcIjoyLFwidXJsXCI6XCJodHRwczpcXFwvXFxcL2hlYWRydW1lLmNvbVxcXC9cXFwvd3AtYWRtaW5cXFwvY29udGFjdFwiLFwiaWRcIjpcIjExZGU1ZDViNzNkMjQ3OWJiYjcyOWI5ODk1MWY5ZDc5XCIsXCJ1cmxfaWRzXCI6W1wiODk0MWVjMDY2N2JmNWRhMDc0ZDc1NWU3ODEyMmEzNTE3MjM3NDE4YVwiXSxcIm1zZ190c1wiOjE3ODcxMDEzMTB9In0
- Sample260819-bz4e4awve1
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://mandrillapp.com/track/click/30701172/headrume.com?p=eyJzIjoid3F1eklLU3U1V1dtY3hIUVBpOXVLUGlfbTl3IiwidiI6MiwicCI6IntcInVcIjozMDcwMTE3MixcInZcIjoyLFwidXJsXCI6XCJodHRwczpcXFwvXFxcL2hlYWRydW1lLmNvbVxcXC9cXFwvd3AtYWRtaW5cXFwvY29udGFjdFwiLFwiaWRcIjpcIjExZGU1ZDViNzNkMjQ3OWJiYjcyOWI5ODk1MWY5ZDc5XCIsXCJ1cmxfaWRzXCI6W1wiODk0MWVjMDY2N2JmNWRhMDc0ZDc1NWU3ODEyMmEzNTE3MjM3NDE4YVwiXSxcIm1zZ190c1wiOjE3ODcxMDEzMTB9In0
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target https://mandrillapp.com/track/click/30701172/headrume.com?p=eyJzIjoid3F1eklLU3U1V1dtY3hIUVBpOXVLUGlfbTl3IiwidiI6MiwicCI6IntcInVcIjozMDcwMTE3MixcInZcIjoyLFwidXJsXCI6XCJodHRwczpcXFwvXFxcL2hlYWRydW1lLmNvbVxcXC9cXFwvd3AtYWRtaW5cXFwvY29udGFjdFwiLFwiaWRcIjpcIjExZGU1ZDViNzNkMjQ3OWJiYjcyOWI5ODk1MWY5ZDc5XCIsXCJ1cmxfaWRzXCI6W1wiODk0MWVjMDY2N2JmNWRhMDc0ZDc1NWU3ODEyMmEzNTE3MjM3NDE4YVwiXSxcIm1zZ190c1wiOjE3ODcxMDEzMTB9In0
-
A potential corporate email address has been identified in the URL: [email protected]