hxxps://firebasestorage[.]googleapis[.]com/v0/b/rdrt-bca53[.]appspot[.]com/o/odrv%2Findex1[.]html?alt=media&token=1c1280e9-b8fe-4a64-b030-b75ce494b7e3&data=eW91cm5hbWVAYWFhaG1haWwuY29t&subf=Open%20Vacations&foldr=Human%20Resources&file=Open%20Vacation%20Submissions[.]xls

General

Target

https://firebasestorage.googleapis.com/v0/b/rdrt-bca53.appspot.com/o/odrv%2Findex1.html?alt=media&token=1c1280e9-b8fe-4a64-b030-b75ce494b7e3&data=eW91cm5hbWVAYWFhaG1haWwuY29t&subf=Open%20Vacations&foldr=Human%20Resources&file=Open%20Vacation%20Submissions.xls
Sample

220904-bcrssaada5

Score

10^/10

onedrive phishing

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact