Watermark

CTI Telemetry

VirusTotal Analysis

Infostealer analysis by HudsonRock

83
🧠 Dispositivi infetti
55
🌐 Utenti compromessi
28
πŸ§‘β€πŸ’Ό Dipendenti compromessi
0
πŸ”‘ Password aziendali
0
πŸ”‘ Password users

RedLine 54
Lumma 48
Raccoon 18
UNKNOWN 4
StealC 4
Azorult 2

https://mail.efuinsurance.com/surgeweb 17
https://webmail.efuinsurance.com/surgeweb 15
https://mail.efuinsurance.com/ 9
https://webmail.efuinsurance.com 8
https://mail.efuinsurance.com 6
http://β€’β€’β€’β€’.efuinsurance.com 5
http://β€’β€’β€’β€’.efuinsurance.com/ 3
https://β€’β€’β€’β€’β€’β€’β€’.efuinsurance.com/β€’β€’β€’/β€’β€’β€’β€’.β€’β€’β€’ 2
http://β€’β€’β€’β€’.efuinsurance.com/β€’β€’β€’β€’β€’β€’β€’β€’ 1

https://online.efuinsurance.com:9003/eClaim_WebApp/indexto.jsp 64
https://online.efuinsurance.com/eClaim_WebApp/indexto.jsp 18
https://online.efuinsurance.com/App_Traveler_Agent/index.jsp 17
https://online.efuinsurance.com:9003/eClaim_WebApp/userchange.jsp 15
https://online.efuinsurance.com:9003/eclaim_webapp/indexto.jsp 9
http://β€’β€’β€’β€’β€’β€’.efuinsurance.com:β€’β€’β€’β€’/β€’β€’β€’β€’β€’β€’_β€’β€’β€’β€’β€’β€’/β€’β€’β€’β€’β€’β€’β€’.β€’β€’β€’ 6
https://β€’β€’β€’β€’β€’β€’.efuinsurance.com/β€’β€’β€’_β€’β€’β€’/β€’β€’β€’β€’β€’β€’β€’β€’β€’β€’β€’β€’.β€’β€’β€’ 6
https://β€’β€’β€’β€’β€’β€’.efuinsurance.com 5
http://β€’β€’β€’β€’β€’β€’.efuinsurance.com:β€’β€’β€’β€’/β€’β€’β€’β€’β€’β€’_β€’β€’β€’β€’β€’β€’/β€’β€’β€’β€’β€’β€’β€’.β€’β€’β€’ 4
https://β€’β€’β€’β€’β€’β€’.efuinsurance.com:β€’β€’β€’β€’ 4
http://β€’β€’β€’β€’β€’β€’β€’β€’.efuinsurance.com:β€’β€’β€’β€’/β€’β€’β€’_β€’β€’_β€’β€’β€’β€’β€’β€’β€’/β€’β€’β€’β€’β€’.β€’β€’β€’ 4
https://β€’β€’β€’β€’β€’β€’.efuinsurance.com:β€’β€’β€’β€’/β€’β€’β€’β€’β€’β€’_β€’β€’β€’β€’β€’β€’/β€’β€’β€’β€’β€’β€’β€’β€’β€’β€’.β€’β€’β€’ 3
http://β€’β€’β€’β€’β€’β€’.efuinsurance.com:β€’β€’β€’β€’/β€’β€’β€’β€’β€’β€’β€’β€’β€’β€’β€’β€’β€’β€’β€’β€’/β€’β€’β€’β€’β€’β€’β€’β€’β€’β€’β€’β€’β€’β€’β€’.β€’β€’β€’ 3
http://β€’β€’β€’β€’β€’β€’.efuinsurance.com:β€’β€’β€’β€’/β€’β€’β€’_β€’β€’β€’β€’β€’β€’β€’β€’_β€’β€’β€’β€’β€’/β€’β€’β€’β€’β€’.β€’β€’β€’ 3
https://β€’β€’β€’β€’β€’β€’.efuinsurance.com:β€’β€’β€’β€’/β€’β€’β€’β€’β€’β€’/β€’β€’β€’β€’β€’β€’.β€’β€’β€’ 3
http://β€’β€’β€’β€’β€’β€’β€’β€’.efuinsurance.com:β€’β€’β€’β€’/β€’β€’β€’_β€’β€’_β€’β€’β€’β€’β€’β€’β€’/β€’β€’β€’β€’β€’_β€’β€’β€’β€’.β€’β€’β€’ 3
http://β€’β€’β€’β€’β€’β€’β€’β€’.efuinsurance.com:β€’β€’β€’β€’/β€’β€’β€’_β€’β€’_β€’β€’β€’β€’β€’β€’β€’/β€’β€’β€’β€’β€’_β€’β€’β€’β€’.β€’β€’β€’ 3
http://β€’β€’β€’β€’β€’β€’β€’β€’.efuinsurance.com:β€’β€’β€’β€’/β€’β€’β€’_β€’β€’_β€’β€’β€’β€’β€’β€’β€’/β€’β€’β€’β€’β€’.β€’β€’β€’ 2
http://β€’β€’β€’β€’β€’β€’β€’β€’.efuinsurance.com:β€’β€’β€’β€’/β€’β€’β€’_β€’β€’_β€’β€’β€’β€’β€’β€’β€’/β€’β€’β€’β€’β€’.β€’β€’β€’ 2
http://β€’β€’β€’β€’β€’β€’.efuinsurance.com:β€’β€’β€’β€’/β€’β€’β€’β€’β€’β€’/β€’β€’β€’β€’β€’β€’.β€’β€’β€’ 2
https://β€’β€’β€’β€’β€’β€’.efuinsurance.com:β€’β€’β€’β€’/β€’β€’β€’β€’β€’β€’β€’β€’β€’β€’β€’β€’β€’β€’β€’β€’/β€’β€’β€’β€’β€’β€’β€’β€’β€’β€’β€’β€’β€’β€’β€’.β€’β€’β€’ 2
http://β€’β€’β€’β€’β€’β€’β€’β€’.efuinsurance.com:β€’β€’β€’β€’/β€’β€’β€’_β€’β€’_β€’β€’β€’β€’β€’β€’β€’/β€’β€’β€’β€’β€’.β€’β€’β€’ 2
https://β€’β€’β€’β€’β€’β€’.efuinsurance.com:β€’β€’β€’β€’/β€’β€’β€’β€’β€’β€’_β€’β€’β€’β€’β€’β€’/β€’β€’β€’β€’.β€’β€’β€’ 2
http://β€’β€’β€’β€’β€’β€’β€’β€’β€’β€’β€’β€’.efuinsurance.com 2
https://β€’β€’β€’β€’β€’β€’.efuinsurance.com/β€’β€’β€’β€’β€’β€’β€’/β€’β€’β€’β€’β€’ 2
https://β€’β€’β€’β€’β€’β€’β€’β€’β€’.efuinsurance.com/β€’β€’β€’β€’β€’β€’β€’/β€’β€’β€’β€’β€’ 2
https://β€’β€’β€’β€’β€’β€’β€’β€’β€’β€’β€’β€’.efuinsurance.com 2
https://β€’β€’β€’β€’β€’β€’.efuinsurance.com/β€’β€’β€’_β€’β€’β€’ 2
https://β€’β€’β€’β€’β€’β€’.efuinsurance.com:β€’β€’β€’β€’/β€’β€’β€’_β€’β€’β€’/ 1
https://β€’β€’β€’β€’β€’β€’.efuinsurance.com:β€’β€’β€’β€’/β€’β€’β€’β€’β€’β€’β€’β€’_β€’β€’β€’β€’_β€’β€’β€’β€’β€’β€’β€’β€’β€’β€’β€’/β€’β€’β€’β€’β€’.β€’β€’β€’ 1
https://β€’β€’β€’β€’β€’β€’.efuinsurance.com:β€’β€’β€’β€’/β€’β€’β€’β€’β€’β€’β€’β€’_β€’β€’β€’β€’_β€’β€’β€’β€’β€’β€’β€’β€’β€’β€’β€’/β€’β€’β€’β€’β€’.β€’β€’β€’ 1
https://β€’β€’β€’β€’β€’β€’.efuinsurance.com:β€’β€’β€’β€’/β€’β€’β€’_β€’β€’β€’ 1
https://β€’β€’β€’β€’β€’β€’.efuinsurance.com/β€’β€’β€’β€’β€’β€’_β€’β€’β€’β€’β€’β€’/β€’β€’β€’β€’β€’β€’β€’β€’β€’β€’.β€’β€’β€’ 1
https://β€’β€’β€’β€’β€’β€’.efuinsurance.com/β€’β€’β€’β€’β€’β€’_β€’β€’β€’β€’β€’β€’/β€’β€’β€’β€’β€’β€’β€’β€’β€’β€’.β€’β€’β€’ 1
https://β€’β€’β€’β€’β€’β€’.efuinsurance.com/β€’β€’β€’/β€’/β€’β€’β€’_β€’β€’β€’/β€’β€’β€’β€’β€’β€’β€’β€’β€’β€’β€’/β€’β€’β€’β€’β€’ 1
https://β€’β€’β€’.efuinsurance.com 1

Windows Defender 10
Not Found 9