hxxps://click[.]stitchfix[.]com/YXcr?pid=Email&sf_client_external_id=613c20e2-b0dd-4438-8a2e-0d1d1513fc57&deeplink=true&utm_campaign=email_us_w_reactivation_styleshuffle&utm_source=blueshift&utm_medium=email&utm_content=email_us_w_reactivation_styleshuffle_437152218&af_esp_url_path=/track&af_esp_url_params=uid=32c44352-a594-48c3-bce6-586e60e061a2&txnid=f1763a38-2e1d-5443-9ceb-d12aa1744af2&bsft_aaid=3a8cb797-2e0c-489f-b330-8334bcfa0b57&eid=7efc95f6-bd2a-acf5-0423-478fa777323c&mid=530eddc0-b872-4a79-ac14-24461f2f973d&bsft_ek=2022-09-21T14[:]24[:]38Z&bsft_mime_type=html&bsft_link_id=17&bsft_tv=62&bsft_lx=9&a=click&api=true&af_esp_name=blueshift&af_dp=hxxps://www[.]stitchfix[.]com/app/home&af_web_dp=[//]jobranco[.]com[//][//][//][//]/common[//][//][//]nzfsag[//][//]richard[.]batty@invesco[.]com

General

Target

https://click.stitchfix.com/YXcr?pid=Email&sf_client_external_id=613c20e2-b0dd-4438-8a2e-0d1d1513fc57&deeplink=true&utm_campaign=email_us_w_reactivation_styleshuffle&utm_source=blueshift&utm_medium=email&utm_content=email_us_w_reactivation_styleshuffle_437152218&af_esp_url_path=/track&af_esp_url_params=uid=32c44352-a594-48c3-bce6-586e60e061a2&txnid=f1763a38-2e1d-5443-9ceb-d12aa1744af2&bsft_aaid=3a8cb797-2e0c-489f-b330-8334bcfa0b57&eid=7efc95f6-bd2a-acf5-0423-478fa777323c&mid=530eddc0-b872-4a79-ac14-24461f2f973d&bsft_ek=2022-09-21T14:24:38Z&bsft_mime_type=html&bsft_link_id=17&bsft_tv=62&bsft_lx=9&a=click&api=true&af_esp_name=blueshift&af_dp=https://www.stitchfix.com/app/home&af_web_dp=//jobranco.com/////////common//////nzfsag////[email protected]
Sample

230329-n54n9shg5y

Score

8^/10

phishing

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact