General
- Target https://e.email.ticketsatwork.com/click?ZVFLLbtswENS3CNAtTMilKVEBgtaO7dRJ6wJ1nr0YFLWSFT0tU7Hbov9e0FIC97qc4ezMzsxssK276rxRxmC7q6vPqW52OQOr51z_ccssdi9dFkgZSg5C0pEYIdM05EoyKtwzVxv30sUoJUbtiYAkkAghl6EvFCRSAQitEz8SlDEEQt0zt7Vfnui4f53H9xysdZPpHM1OmX3d5jaAC12XZV2tW-yt7C4KVcVZlZ43m8ZZ_fyyxig1ar9eTifjbzSkIVDwNQt5IIRwvmLEnO2ngbPu2uJqkLjIqhgP9hcPBJ97IMC3KWlVNipLKzud7rHQdYmEE23UB6Tf5AjAUmXFx0Of8PHhaWDOLIBwMn8B_4hL2rqMuqJAk_Ua7DjWhdmo3eY4CSAKWTiKA8GiJBIwkklAfa6pkjJWMYKUIWgme2LZZHFPG4leohsGglMhBPAeV1dvp5v_xhNHtjD_GSYEh8UJSX6Bb0uDePX8dJg9bBfPMw_mi_a1nsDbdHr3SG9f2OH--_RH3ngwWcj8ofBgzpddlXsw72Z3Fn8vuu14XKxuXper7WRo4Wm7AidV2xvup87t-x2vhzv-GwAcm1152d08e
- Sample260910-zrxjksef87
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://e.email.ticketsatwork.com/click?ZVFLLbtswENS3CNAtTMilKVEBgtaO7dRJ6wJ1nr0YFLWSFT0tU7Hbov9e0FIC97qc4ezMzsxssK276rxRxmC7q6vPqW52OQOr51z_ccssdi9dFkgZSg5C0pEYIdM05EoyKtwzVxv30sUoJUbtiYAkkAghl6EvFCRSAQitEz8SlDEEQt0zt7Vfnui4f53H9xysdZPpHM1OmX3d5jaAC12XZV2tW-yt7C4KVcVZlZ43m8ZZ_fyyxig1ar9eTifjbzSkIVDwNQt5IIRwvmLEnO2ngbPu2uJqkLjIqhgP9hcPBJ97IMC3KWlVNipLKzud7rHQdYmEE23UB6Tf5AjAUmXFx0Of8PHhaWDOLIBwMn8B_4hL2rqMuqJAk_Ua7DjWhdmo3eY4CSAKWTiKA8GiJBIwkklAfa6pkjJWMYKUIWgme2LZZHFPG4leohsGglMhBPAeV1dvp5v_xhNHtjD_GSYEh8UJSX6Bb0uDePX8dJg9bBfPMw_mi_a1nsDbdHr3SG9f2OH--_RH3ngwWcj8ofBgzpddlXsw72Z3Fn8vuu14XKxuXper7WRo4Wm7AidV2xvup87t-x2vhzv-GwAcm1152d08e
Resource
win10v2004-20260513-en
Malware Config
Targets
-
- Target https://e.email.ticketsatwork.com/click?ZVFLLbtswENS3CNAtTMilKVEBgtaO7dRJ6wJ1nr0YFLWSFT0tU7Hbov9e0FIC97qc4ezMzsxssK276rxRxmC7q6vPqW52OQOr51z_ccssdi9dFkgZSg5C0pEYIdM05EoyKtwzVxv30sUoJUbtiYAkkAghl6EvFCRSAQitEz8SlDEEQt0zt7Vfnui4f53H9xysdZPpHM1OmX3d5jaAC12XZV2tW-yt7C4KVcVZlZ43m8ZZ_fyyxig1ar9eTifjbzSkIVDwNQt5IIRwvmLEnO2ngbPu2uJqkLjIqhgP9hcPBJ97IMC3KWlVNipLKzud7rHQdYmEE23UB6Tf5AjAUmXFx0Of8PHhaWDOLIBwMn8B_4hL2rqMuqJAk_Ua7DjWhdmo3eY4CSAKWTiKA8GiJBIwkklAfa6pkjJWMYKUIWgme2LZZHFPG4leohsGglMhBPAeV1dvp5v_xhNHtjD_GSYEh8UJSX6Bb0uDePX8dJg9bBfPMw_mi_a1nsDbdHr3SG9f2OH--_RH3ngwWcj8ofBgzpddlXsw72Z3Fn8vuu14XKxuXper7WRo4Wm7AidV2xvup87t-x2vhzv-GwAcm1152d08e
-
A potential corporate email address has been identified in the URL