General
- Target https://app.adjust.com/os8lvd_etbi8p?campaign=BookingConfirmation&adgroup=DE&creative=DE&deep_link=flixbus://booking?wt_mc=owned.de.FlixBus.email.backend.bookingconfirmation.bookingconfirmation.ad&fallback=https://mxairli.com/g/
- Sample260915-vkeb7svy2k
Score
10/10
Malware Config
Targets
-
- Target https://app.adjust.com/os8lvd_etbi8p?campaign=BookingConfirmation&adgroup=DE&creative=DE&deep_link=flixbus://booking?wt_mc=owned.de.FlixBus.email.backend.bookingconfirmation.bookingconfirmation.ad&fallback=https://mxairli.com/g/
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.