General
- Target http://url9953.theresanaiforthat.com/ls/click?upn=u001.FpcPkQjiPnLzrBOkpgQf3jKqIsf2xt7Kj2OdPATr3bAPhyUNkFwcnSqaHa4yIuDzvkGG-2Fqel4h6BM3C-2FU220DrJoON8lfgAG8C9wUPzfsca5pbHWfyFfKNL90DpTAEy7hOgzJFWWMdsLqV8EsOKorK-2Bcw12fpl5f-2BoMYf9pD49QVkwTjGee0yv3ZMplYdKpW1D9T5eUqMDI3p7CmzhKylxvTVfr-2FzAA28Y5hmKQhGNc-3DrA9p_MjAhclRA0hH-2F1a1m8v8T4gnKozB-2FbueEE89AG4DPrUD4-2FTQaP89BwdztH4nx-2FkVVnvc3b-2FvVlmHxkzXPYkgFH-2BRbElUfXmSxeixnKbDQWtc-2FQ-2F265uBrAIFIYKCOt4mMoASkhyiFWInZ59FtPJT14uYXu4CE8rg6AKH650foD-2BtrfDGoT7IYjrhflBmF0BJWehoO9iH9-2Bq10L5ux-2FYzb0w-3D-3D
- Sample260824-3j4vgazzds
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
http://url9953.theresanaiforthat.com/ls/click?upn=u001.FpcPkQjiPnLzrBOkpgQf3jKqIsf2xt7Kj2OdPATr3bAPhyUNkFwcnSqaHa4yIuDzvkGG-2Fqel4h6BM3C-2FU220DrJoON8lfgAG8C9wUPzfsca5pbHWfyFfKNL90DpTAEy7hOgzJFWWMdsLqV8EsOKorK-2Bcw12fpl5f-2BoMYf9pD49QVkwTjGee0yv3ZMplYdKpW1D9T5eUqMDI3p7CmzhKylxvTVfr-2FzAA28Y5hmKQhGNc-3DrA9p_MjAhclRA0hH-2F1a1m8v8T4gnKozB-2FbueEE89AG4DPrUD4-2FTQaP89BwdztH4nx-2FkVVnvc3b-2FvVlmHxkzXPYkgFH-2BRbElUfXmSxeixnKbDQWtc-2FQ-2F265uBrAIFIYKCOt4mMoASkhyiFWInZ59FtPJT14uYXu4CE8rg6AKH650foD-2BtrfDGoT7IYjrhflBmF0BJWehoO9iH9-2Bq10L5ux-2FYzb0w-3D-3D
Resource
win11-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target http://url9953.theresanaiforthat.com/ls/click?upn=u001.FpcPkQjiPnLzrBOkpgQf3jKqIsf2xt7Kj2OdPATr3bAPhyUNkFwcnSqaHa4yIuDzvkGG-2Fqel4h6BM3C-2FU220DrJoON8lfgAG8C9wUPzfsca5pbHWfyFfKNL90DpTAEy7hOgzJFWWMdsLqV8EsOKorK-2Bcw12fpl5f-2BoMYf9pD49QVkwTjGee0yv3ZMplYdKpW1D9T5eUqMDI3p7CmzhKylxvTVfr-2FzAA28Y5hmKQhGNc-3DrA9p_MjAhclRA0hH-2F1a1m8v8T4gnKozB-2FbueEE89AG4DPrUD4-2FTQaP89BwdztH4nx-2FkVVnvc3b-2FvVlmHxkzXPYkgFH-2BRbElUfXmSxeixnKbDQWtc-2FQ-2F265uBrAIFIYKCOt4mMoASkhyiFWInZ59FtPJT14uYXu4CE8rg6AKH650foD-2BtrfDGoT7IYjrhflBmF0BJWehoO9iH9-2Bq10L5ux-2FYzb0w-3D-3D
-
A potential corporate email address has been identified in the URL
-
Probable phishing domain