General
- Target https://ng1.canadacis.org/?utm_source=taboola&utm_medium=native&utm_campaign=nigeria_desk_age24+_8.9&utm_content=canada+migration+becomes+tighter,+but+still+possible+for+the+right+profiles&utm_id=50393568&ad_id=4357009994&tbclid=tbl7mjhlwaggcidi6mbw1h0vtf0zhcf9f90xli0r6c-qkvfyzhgz1shagbcf214y3miqqlxoopocasdymzpckjqo-u59modjgxg4kuyiy9-gisyqauae&tblci=tbl7mjhlwaggcidi6mbw1h0vtf0zhcf9f90xli0r6c-qkvfyzhgz1shagbcf214y3miqqlxoopocasdymzpckjqo-u59modjgxg4kuyiy9-gisyqauae#tblcitbl7mjhlwaggcidi6mbw1h0vtf0zhcf9f90xli0r6c-qkvfyzhgz1shagbcf214y3miqqlxoopocasdymzpckjqo-u59modjgxg4kuyiy9-gisyqauae
- Sample261011-whafxaec22
Score
6/10
Malware Config
Targets
-
- Target https://ng1.canadacis.org/?utm_source=taboola&utm_medium=native&utm_campaign=nigeria_desk_age24+_8.9&utm_content=canada+migration+becomes+tighter,+but+still+possible+for+the+right+profiles&utm_id=50393568&ad_id=4357009994&tbclid=tbl7mjhlwaggcidi6mbw1h0vtf0zhcf9f90xli0r6c-qkvfyzhgz1shagbcf214y3miqqlxoopocasdymzpckjqo-u59modjgxg4kuyiy9-gisyqauae&tblci=tbl7mjhlwaggcidi6mbw1h0vtf0zhcf9f90xli0r6c-qkvfyzhgz1shagbcf214y3miqqlxoopocasdymzpckjqo-u59modjgxg4kuyiy9-gisyqauae#tblcitbl7mjhlwaggcidi6mbw1h0vtf0zhcf9f90xli0r6c-qkvfyzhgz1shagbcf214y3miqqlxoopocasdymzpckjqo-u59modjgxg4kuyiy9-gisyqauae
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.