hxxps://attachments[.]office[.]net/owa/Cathy[.]Yapko%40traditionshealth[.]com/service[.]svc/s/GetAttachmentThumbnail?id=AAMkAGIxNjYyMGRmLTI2ZDQtNDk3MS04MTVhLTgxMjQ3NWViZWUyOQBGAAAAAACLUwoUFjG0Rr2c%2BkmrCtREBwC6rHB6ksNmSbuEXeNxVoixAAAAAAAOAAC6rHB6ksNmSbuEXeNxVoixAAg2vKHgAAABEgAQAEV8Yfm%2FzsFBu9bPgFOJwZI%3D&thumbnailType=2&token=eyJhbGciOiJSUzI1NiIsImtpZCI6IjczRkI5QkJFRjYzNjc4RDRGN0U4NEI0NDBCQUJCMTJBMzM5RDlGOTgiLCJ0eXAiOiJKV1QiLCJ4NXQiOiJjX3VidnZZMmVOVDM2RXRFQzZ1eEtqT2RuNWcifQ[.]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[.]my70luZbl_1rsz-rwRfcZ3LbFESJTyFJS-dNXMpdaMZFdaXruU8IsjkKjxNnV1r2jDj0ws75qea9Lq33yv34p3kv6RrNdL9eV2VETpC9nxXDJt5cXKmjdSbft9Brk82ttUGtzr6XqhKX408qX5tZl6E_-KR6xfmtjEjvMHNjyFamHluMGsuIAgAOpgm5mI01oj9y927W3w1QwF6_KN3v1AW0whD06-isbdO11QUfG0hhI__L8XCFBwiO-GaqdCkUKnOII_zqkHDaoHCNl3UAM4nBEDDMbfJ7LdCyTESZtSSB8GzYWH8fUtRm47zX5Nk3JwMJPH2SyHmHvlHPMzde_A&X-OWA-CANARY=UdDGkEP0UUucYWscAhkBmQBJHdZlUdsY-SX9mJEy2_lcdBoCIhkUMUHS433PK4bYOrnnmkJdP7k[.]&owa=outlook[.]office[.]com&scriptVer=20230428009[.]14&animation=true

Sharing

Behavioral task

behavioral1

Sample

https://attachments.office.net/owa/Cathy.Yapko%40traditionshealth.com/service.svc/s/GetAttachmentThumbnail?id=AAMkAGIxNjYyMGRmLTI2ZDQtNDk3MS04MTVhLTgxMjQ3NWViZWUyOQBGAAAAAACLUwoUFjG0Rr2c%2BkmrCtREBwC6rHB6ksNmSbuEXeNxVoixAAAAAAAOAAC6rHB6ksNmSbuEXeNxVoixAAg2vKHgAAABEgAQAEV8Yfm%2FzsFBu9bPgFOJwZI%3D&thumbnailType=2&token=eyJhbGciOiJSUzI1NiIsImtpZCI6IjczRkI5QkJFRjYzNjc4RDRGN0U4NEI0NDBCQUJCMTJBMzM5RDlGOTgiLCJ0eXAiOiJKV1QiLCJ4NXQiOiJjX3VidnZZMmVOVDM2RXRFQzZ1eEtqT2RuNWcifQ.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.my70luZbl_1rsz-rwRfcZ3LbFESJTyFJS-dNXMpdaMZFdaXruU8IsjkKjxNnV1r2jDj0ws75qea9Lq33yv34p3kv6RrNdL9eV2VETpC9nxXDJt5cXKmjdSbft9Brk82ttUGtzr6XqhKX408qX5tZl6E_-KR6xfmtjEjvMHNjyFamHluMGsuIAgAOpgm5mI01oj9y927W3w1QwF6_KN3v1AW0whD06-isbdO11QUfG0hhI__L8XCFBwiO-GaqdCkUKnOII_zqkHDaoHCNl3UAM4nBEDDMbfJ7LdCyTESZtSSB8GzYWH8fUtRm47zX5Nk3JwMJPH2SyHmHvlHPMzde_A&X-OWA-CANARY=UdDGkEP0UUucYWscAhkBmQBJHdZlUdsY-SX9mJEy2_lcdBoCIhkUMUHS433PK4bYOrnnmkJdP7k.&owa=outlook.office.com&scriptVer=20230428009.14&animation=true

Resource

win10v2004-20230221-en

windows10-2004-x64

9 signatures

150 seconds

General

Target

https://attachments.office.net/owa/Cathy.Yapko%40traditionshealth.com/service.svc/s/GetAttachmentThumbnail?id=AAMkAGIxNjYyMGRmLTI2ZDQtNDk3MS04MTVhLTgxMjQ3NWViZWUyOQBGAAAAAACLUwoUFjG0Rr2c%2BkmrCtREBwC6rHB6ksNmSbuEXeNxVoixAAAAAAAOAAC6rHB6ksNmSbuEXeNxVoixAAg2vKHgAAABEgAQAEV8Yfm%2FzsFBu9bPgFOJwZI%3D&thumbnailType=2&token=eyJhbGciOiJSUzI1NiIsImtpZCI6IjczRkI5QkJFRjYzNjc4RDRGN0U4NEI0NDBCQUJCMTJBMzM5RDlGOTgiLCJ0eXAiOiJKV1QiLCJ4NXQiOiJjX3VidnZZMmVOVDM2RXRFQzZ1eEtqT2RuNWcifQ.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.my70luZbl_1rsz-rwRfcZ3LbFESJTyFJS-dNXMpdaMZFdaXruU8IsjkKjxNnV1r2jDj0ws75qea9Lq33yv34p3kv6RrNdL9eV2VETpC9nxXDJt5cXKmjdSbft9Brk82ttUGtzr6XqhKX408qX5tZl6E_-KR6xfmtjEjvMHNjyFamHluMGsuIAgAOpgm5mI01oj9y927W3w1QwF6_KN3v1AW0whD06-isbdO11QUfG0hhI__L8XCFBwiO-GaqdCkUKnOII_zqkHDaoHCNl3UAM4nBEDDMbfJ7LdCyTESZtSSB8GzYWH8fUtRm47zX5Nk3JwMJPH2SyHmHvlHPMzde_A&X-OWA-CANARY=UdDGkEP0UUucYWscAhkBmQBJHdZlUdsY-SX9mJEy2_lcdBoCIhkUMUHS433PK4bYOrnnmkJdP7k.&owa=outlook.office.com&scriptVer=20230428009.14&animation=true

Score

8^/10

phishing

Malware Config

Signatures

A potential corporate email address has been identified in the URL: [email protected]
phishing

Sharing

General

Malware Config

Signatures

Files