General
- Target https://trackingservice.monday.com/tracker/link?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJvcmlnaW5hbFVybCI6Imh0dHBzOi8vdHVjc29ubG9ja3NtaXRoYXouY29tL20iLCJlbWFpbElkIjoiNDhiOGJmY2YtOTA5MS00MzgyLWEyOGMtMjg0MDdjODc0NTYxIiwiaWF0IjoxNzkwNjg1Mzg4fQ.52XYPlRNNNBRVdJ1Q3uJab4WuG5ou9QK6iR1lHx6LDk&r=use1#?5b833c5f4c084567857fa4ef1d936d3b032887db=Y3JlZGl0Y29udHJvbEBpb250cmFkaW5nLmNvbQ==
- Sample260930-srf39sbd27
Score
7/10
Malware Config
Targets
-
- Target https://trackingservice.monday.com/tracker/link?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJvcmlnaW5hbFVybCI6Imh0dHBzOi8vdHVjc29ubG9ja3NtaXRoYXouY29tL20iLCJlbWFpbElkIjoiNDhiOGJmY2YtOTA5MS00MzgyLWEyOGMtMjg0MDdjODc0NTYxIiwiaWF0IjoxNzkwNjg1Mzg4fQ.52XYPlRNNNBRVdJ1Q3uJab4WuG5ou9QK6iR1lHx6LDk&r=use1#?5b833c5f4c084567857fa4ef1d936d3b032887db=Y3JlZGl0Y29udHJvbEBpb250cmFkaW5nLmNvbQ==
Score7/10-
A potential corporate email address has been identified in the URL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Detected potential entity reuse from brand MICROSOFT.