URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://cd91bfba-971e-4484-9668-78120be9d174-fb7798b5.liveofficeupdate.com/adfs/ls/?login_hint=email%40email.com&client-request-id=f297154e-15d6-4b23-8f94-83022dac4282&username=email%40email.com&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAT8RKd_uiaq7N0_pZlJd41T0ypGZcJG6F9gZHzByDiJSTIxL6UotVwvqbQoOSO1pMQhKbEytQik5BaToH9RumdKeLFbakpqUWJJZn7eI2bc6i-wCLxiYTLg-MHCuIgV6K5bv4tLtR_Y-3SvC35wouU3wylW_QCzykqPMNcIj1w_y7TwSBdXP5OoyIqg9KyAqGzLLLfIJJPEwLw8d_eqHFdbSyvDCWxCE9iYTrExfGBj7GBnmMXOcICT8QAvww--z8v3Pfwyb-lbDwA1#
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
https://cd91bfba-971e-4484-9668-78120be9d174-fb7798b5.liveofficeupdate.com/adfs/ls/?login_hint=email%40email.com&client-request-id=f297154e-15d6-4b23-8f94-83022dac4282&username=email%40email.com&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAT8RKd_uiaq7N0_pZlJd41T0ypGZcJG6F9gZHzByDiJSTIxL6UotVwvqbQoOSO1pMQhKbEytQik5BaToH9RumdKeLFbakpqUWJJZn7eI2bc6i-wCLxiYTLg-MHCuIgV6K5bv4tLtR_Y-3SvC35wouU3wylW_QCzykqPMNcIj1w_y7TwSBdXP5OoyIqg9KyAqGzLLLfIJJPEwLw8d_eqHFdbSyvDCWxCE9iYTrExfGBj7GBnmMXOcICT8QAvww--z8v3Pfwyb-lbDwA1#
Resource
win10v2004-20220812-en
General
-
Target
https://cd91bfba-971e-4484-9668-78120be9d174-fb7798b5.liveofficeupdate.com/adfs/ls/?login_hint=email%40email.com&client-request-id=f297154e-15d6-4b23-8f94-83022dac4282&username=email%40email.com&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAT8RKd_uiaq7N0_pZlJd41T0ypGZcJG6F9gZHzByDiJSTIxL6UotVwvqbQoOSO1pMQhKbEytQik5BaToH9RumdKeLFbakpqUWJJZn7eI2bc6i-wCLxiYTLg-MHCuIgV6K5bv4tLtR_Y-3SvC35wouU3wylW_QCzykqPMNcIj1w_y7TwSBdXP5OoyIqg9KyAqGzLLLfIJJPEwLw8d_eqHFdbSyvDCWxCE9iYTrExfGBj7GBnmMXOcICT8QAvww--z8v3Pfwyb-lbDwA1#
Malware Config
Signatures
-
A potential corporate email address has been identified in the URL: [email protected]