hxxps://attachment[.]outlook[.]live[.]net/owa/MSA%3Atrevlick%40hotmail[.]com/service[.]svc/s/GetFileAttachment?id=AQMkADAwATE0OTgwLTRlOTkALTEzNTctMDACLTAwCgBGAAADB36VR4QtL0mu%2F3ZNn6XOdAcAej61Mh%2Br%2BU28%2BR2engDWj1sAAAIBDAAAAHo%2BtTIfq%2FlNvPkdnp4A1o9bAAU7gHogAAAAARIAEABpFoAL1cNVTad9nM2e8xxk&isc=1&token=eyJhbGciOiJSUzI1NiIsImtpZCI6IkQ4OThGN0RDMjk2ODQ1MDk1RUUwREZGQ0MzODBBOTM5NjUwNDNFNjQiLCJ0eXAiOiJKV1QiLCJ4NXQiOiIySmozM0Nsb1JRbGU0Tl84dzRDcE9XVUVQbVEifQ[.]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[.]R-w3K4j2RDyWDcqJDd0H0lPx2S0kv2JgNa1WGyI6dBtD6ctqWgSKE4bgeMYuBQjFTZx1X9ZoxT2TGxB8qpgAE-1ABzgeXppAG-8D6mI_tEzaDr_Feb4yRvIprDeQxL99XONeZyjaqA_M6Z31vVMj9Jnigkg_FoGwvrb5Vryl4H4JtKhGhCEGKS1AoJkQ_hU7BCcFX-Ii6m7FfDZG7UcOWLcLdi499YLFqDqpok1BcgYQn77YeyAD07gn4iqogV2-5RgY3PmCUHqBGklKBHYhnFkL9fJfyUNKurdz3D6n4qfM-ySC2AL304SKJe14aX81gyZNnWQPhWz8_K3h_-oyHw&X-OWA-CANARY=ZpdZnqrCKEC2Vz6H03n8ylCuHTC2zdoYeW__Z7lvY_I4TzDawJtECBnCSwGr6UDKHEHe8XlmFYk[.]&owa=outlook[.]live[.]com&scriptVer=20221104009[.]08&isDownload=true&animation=true

Sharing

Behavioral task

behavioral1

Sample

https://attachment.outlook.live.net/owa/MSA%3Atrevlick%40hotmail.com/service.svc/s/GetFileAttachment?id=AQMkADAwATE0OTgwLTRlOTkALTEzNTctMDACLTAwCgBGAAADB36VR4QtL0mu%2F3ZNn6XOdAcAej61Mh%2Br%2BU28%2BR2engDWj1sAAAIBDAAAAHo%2BtTIfq%2FlNvPkdnp4A1o9bAAU7gHogAAAAARIAEABpFoAL1cNVTad9nM2e8xxk&isc=1&token=eyJhbGciOiJSUzI1NiIsImtpZCI6IkQ4OThGN0RDMjk2ODQ1MDk1RUUwREZGQ0MzODBBOTM5NjUwNDNFNjQiLCJ0eXAiOiJKV1QiLCJ4NXQiOiIySmozM0Nsb1JRbGU0Tl84dzRDcE9XVUVQbVEifQ.eyJvcmlnaW4iOiJodHRwczovL291dGxvb2subGl2ZS5jb20iLCJ1YyI6IjY0MDA1OTE4YzExZTQxN2JiODUxZjU4N2ZmYjk4OWFmIiwidmVyIjoiRXhjaGFuZ2UuQ2FsbGJhY2suVjEiLCJhcHBjdHhzZW5kZXIiOiJPd2FEb3dubG9hZEA4NGRmOWU3Zi1lOWY2LTQwYWYtYjQzNS1hYWFhYWFhYWFhYWEiLCJpc3NyaW5nIjoiV1ciLCJhcHBjdHgiOiJ7XCJtc2V4Y2hwcm90XCI6XCJvd2FcIixcInB1aWRcIjpcIjM2MjI5MDQwMDAwNjk5OVwiLFwic2NvcGVcIjpcIk93YURvd25sb2FkXCIsXCJvaWRcIjpcIjAwMDE0OTgwLTRlOTktMTM1Ny0wMDAwLTAwMDAwMDAwMDAwMFwiLFwicHJpbWFyeXNpZFwiOlwiUy0xLTI4MjctODQzNTItMTMxODY1NDgwN1wifSIsIm5iZiI6MTY2OTI1MTEzNywiZXhwIjoxNjY5MjUxNzM3LCJpc3MiOiIwMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDBAODRkZjllN2YtZTlmNi00MGFmLWI0MzUtYWFhYWFhYWFhYWFhIiwiYXVkIjoiMDAwMDAwMDItMDAwMC0wZmYxLWNlMDAtMDAwMDAwMDAwMDAwL2F0dGFjaG1lbnQub3V0bG9vay5saXZlLm5ldEA4NGRmOWU3Zi1lOWY2LTQwYWYtYjQzNS1hYWFhYWFhYWFhYWEiLCJoYXBwIjoib3dhIn0.R-w3K4j2RDyWDcqJDd0H0lPx2S0kv2JgNa1WGyI6dBtD6ctqWgSKE4bgeMYuBQjFTZx1X9ZoxT2TGxB8qpgAE-1ABzgeXppAG-8D6mI_tEzaDr_Feb4yRvIprDeQxL99XONeZyjaqA_M6Z31vVMj9Jnigkg_FoGwvrb5Vryl4H4JtKhGhCEGKS1AoJkQ_hU7BCcFX-Ii6m7FfDZG7UcOWLcLdi499YLFqDqpok1BcgYQn77YeyAD07gn4iqogV2-5RgY3PmCUHqBGklKBHYhnFkL9fJfyUNKurdz3D6n4qfM-ySC2AL304SKJe14aX81gyZNnWQPhWz8_K3h_-oyHw&X-OWA-CANARY=ZpdZnqrCKEC2Vz6H03n8ylCuHTC2zdoYeW__Z7lvY_I4TzDawJtECBnCSwGr6UDKHEHe8XlmFYk.&owa=outlook.live.com&scriptVer=20221104009.08&isDownload=true&animation=true

Resource

win7-20220812-en

windows7-x64

7 signatures

1800 seconds

Behavioral task

behavioral2

Sample

Resource

win10v2004-20220812-en

windows10-2004-x64

8 signatures

1800 seconds

General

Target

https://attachment.outlook.live.net/owa/MSA%3Atrevlick%40hotmail.com/service.svc/s/GetFileAttachment?id=AQMkADAwATE0OTgwLTRlOTkALTEzNTctMDACLTAwCgBGAAADB36VR4QtL0mu%2F3ZNn6XOdAcAej61Mh%2Br%2BU28%2BR2engDWj1sAAAIBDAAAAHo%2BtTIfq%2FlNvPkdnp4A1o9bAAU7gHogAAAAARIAEABpFoAL1cNVTad9nM2e8xxk&isc=1&token=eyJhbGciOiJSUzI1NiIsImtpZCI6IkQ4OThGN0RDMjk2ODQ1MDk1RUUwREZGQ0MzODBBOTM5NjUwNDNFNjQiLCJ0eXAiOiJKV1QiLCJ4NXQiOiIySmozM0Nsb1JRbGU0Tl84dzRDcE9XVUVQbVEifQ.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.R-w3K4j2RDyWDcqJDd0H0lPx2S0kv2JgNa1WGyI6dBtD6ctqWgSKE4bgeMYuBQjFTZx1X9ZoxT2TGxB8qpgAE-1ABzgeXppAG-8D6mI_tEzaDr_Feb4yRvIprDeQxL99XONeZyjaqA_M6Z31vVMj9Jnigkg_FoGwvrb5Vryl4H4JtKhGhCEGKS1AoJkQ_hU7BCcFX-Ii6m7FfDZG7UcOWLcLdi499YLFqDqpok1BcgYQn77YeyAD07gn4iqogV2-5RgY3PmCUHqBGklKBHYhnFkL9fJfyUNKurdz3D6n4qfM-ySC2AL304SKJe14aX81gyZNnWQPhWz8_K3h_-oyHw&X-OWA-CANARY=ZpdZnqrCKEC2Vz6H03n8ylCuHTC2zdoYeW__Z7lvY_I4TzDawJtECBnCSwGr6UDKHEHe8XlmFYk.&owa=outlook.live.com&scriptVer=20221104009.08&isDownload=true&animation=true

Sharing

General

Malware Config

Signatures

Files