General
- Target https://account.proton.me/drive/signup?ref=drsignp&mode=sps&plan=free¤cy=CHF&externalInvitationID=Dk5WD4mCh9FYSHuRYXyXCg&email=swr.parknride%40dot.wi.gov&preVerifiedAddressToken=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3ODcyMjcwODAuMDM2MTE3MSwiZXhwIjoxNzg5ODE5MDgwLCJFbWFpbCI6IkdSNGtVNWZvUDVMaHF5MTBhMGxZRTBxek00Y2xRK2NLK3QzQ3FiK2YvL009IiwiaXNzIjoicHJvdG9uLm1lIiwiYXVkIjoicHJvdG9uLm1lIiwiVHlwZSI6Nn0.Rdn_wnHTHfrqtGHR3yNC1LfwYPIu37VGt_2Kq7aGGiI
- Sample260820-r6948adh95
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://account.proton.me/drive/signup?ref=drsignp&mode=sps&plan=free¤cy=CHF&externalInvitationID=Dk5WD4mCh9FYSHuRYXyXCg&email=swr.parknride%40dot.wi.gov&preVerifiedAddressToken=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3ODcyMjcwODAuMDM2MTE3MSwiZXhwIjoxNzg5ODE5MDgwLCJFbWFpbCI6IkdSNGtVNWZvUDVMaHF5MTBhMGxZRTBxek00Y2xRK2NLK3QzQ3FiK2YvL009IiwiaXNzIjoicHJvdG9uLm1lIiwiYXVkIjoicHJvdG9uLm1lIiwiVHlwZSI6Nn0.Rdn_wnHTHfrqtGHR3yNC1LfwYPIu37VGt_2Kq7aGGiI
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target https://account.proton.me/drive/signup?ref=drsignp&mode=sps&plan=free¤cy=CHF&externalInvitationID=Dk5WD4mCh9FYSHuRYXyXCg&email=swr.parknride%40dot.wi.gov&preVerifiedAddressToken=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3ODcyMjcwODAuMDM2MTE3MSwiZXhwIjoxNzg5ODE5MDgwLCJFbWFpbCI6IkdSNGtVNWZvUDVMaHF5MTBhMGxZRTBxek00Y2xRK2NLK3QzQ3FiK2YvL009IiwiaXNzIjoicHJvdG9uLm1lIiwiYXVkIjoicHJvdG9uLm1lIiwiVHlwZSI6Nn0.Rdn_wnHTHfrqtGHR3yNC1LfwYPIu37VGt_2Kq7aGGiI
-
A potential corporate email address has been identified in the URL: [email protected]