General
- Target http://url6899.blue-pill.ai/ls/click?upn=u001.IrmpnEJZjwiGG2b6YjTxiZiRhRzLUbn2La6Ep3EXfq8gvrTzgaouiEzM6667RaxqnqU7wPo50-2Bb1dffkNK7qRYobJyjueSz4GtLyQRyiNiQ-3DAg-z_-2B7RK4JhNMK3s06T1fvludXosnTmU9gWDygp0jXFk5SAePyubs30-2FjbSt9ZR1ZVl4xlnpWtHZDhxb5FJ50WJNWZUMCZPrEDi1LlWXRfFe0LWp4XsT7HQRZ7-2BnnDQkOHb7J0BElnqspAcwnkduo57orsvB3vq0rpu7rCO25NJIV3Nr-2F9-2FMQyhzzEnG72jID9ndoLB2qtq5HHbg-2FgUm-2BJ5ZIg-3D-3D
- Sample260820-yn248aaj4v
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
http://url6899.blue-pill.ai/ls/click?upn=u001.IrmpnEJZjwiGG2b6YjTxiZiRhRzLUbn2La6Ep3EXfq8gvrTzgaouiEzM6667RaxqnqU7wPo50-2Bb1dffkNK7qRYobJyjueSz4GtLyQRyiNiQ-3DAg-z_-2B7RK4JhNMK3s06T1fvludXosnTmU9gWDygp0jXFk5SAePyubs30-2FjbSt9ZR1ZVl4xlnpWtHZDhxb5FJ50WJNWZUMCZPrEDi1LlWXRfFe0LWp4XsT7HQRZ7-2BnnDQkOHb7J0BElnqspAcwnkduo57orsvB3vq0rpu7rCO25NJIV3Nr-2F9-2FMQyhzzEnG72jID9ndoLB2qtq5HHbg-2FgUm-2BJ5ZIg-3D-3D
Resource
win11-20260513-en
12 signatures
600 seconds
Malware Config
Targets
-
- Target http://url6899.blue-pill.ai/ls/click?upn=u001.IrmpnEJZjwiGG2b6YjTxiZiRhRzLUbn2La6Ep3EXfq8gvrTzgaouiEzM6667RaxqnqU7wPo50-2Bb1dffkNK7qRYobJyjueSz4GtLyQRyiNiQ-3DAg-z_-2B7RK4JhNMK3s06T1fvludXosnTmU9gWDygp0jXFk5SAePyubs30-2FjbSt9ZR1ZVl4xlnpWtHZDhxb5FJ50WJNWZUMCZPrEDi1LlWXRfFe0LWp4XsT7HQRZ7-2BnnDQkOHb7J0BElnqspAcwnkduo57orsvB3vq0rpu7rCO25NJIV3Nr-2F9-2FMQyhzzEnG72jID9ndoLB2qtq5HHbg-2FgUm-2BJ5ZIg-3D-3D
-
A potential corporate email address has been identified in the URL