General
-
Target
https://attachments.office.net/owa/rose%40freshwaycompany.com/service.svc/s/GetAttachmentThumbnail?id=AAMkAGJhOGUxOTc5LTc2ZGYtNGQwZC04NGM4LWU4NDYxMDYxMzExZgBGAAAAAAD2HQRLiz0bSJnjiqM%2BvF0RBwAC0dTUo7tHRIO4xhBa3sEHAAAAAAEMAAAC0dTUo7tHRIO4xhBa3sEHAAABLS4CAAABEgAQAEjaa8WgqnZOnX40GFKFCX4%3D&thumbnailType=2&token=eyJhbGciOiJSUzI1NiIsImtpZCI6IjczRkI5QkJFRjYzNjc4RDRGN0U4NEI0NDBCQUJCMTJBMzM5RDlGOTgiLCJ0eXAiOiJKV1QiLCJ4NXQiOiJjX3VidnZZMmVOVDM2RXRFQzZ1eEtqT2RuNWcifQ.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.gECwMLnfmj7d6Xzy4lmmL1b0ec4T71APZtZq0xKMBQiczULz6koIyJjig7oluxzraqqjHGRrdwQrPlhgu76-zVzC8asBPkRqWS2P5a5bBzrn64esKog4v2Vaecz44iSYsrr1H5R261cXMKCeW5oq9y2L3c_1LGSPUMDnxR_19LqVYn0c4r--kkznRBQK5CRp5IUq6TlNd3ddLJ3Xg8Euf_E1f3kmyjnsUZEAsItM30S_Js7bzDI6X-hm-LtC_vKMS3Qa4TQ9yJjT_k6cjKzUGfC31jtZJGi14CWujIJ4IJ9r06LN4D2d0_quyPFizBtCmjl6XUMNgotUQrlBfiEpwg&X-OWA-CANARY=e8JblX3gEUqEaPnxddYTDXCtFI-vUNsYP24xuHduGwwOecwODzzqVV_LR8VJPnSongQJ7ej2kOQ.&owa=outlook.office.com&scriptVer=20230428009.13&animation=true
Malware Config
Signatures
-
A potential corporate email address has been identified in the URL: [email protected]