General
-
Target
https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=3DTIPRGARN%40LIST.TI.COM&senderemailaddress=3DOED_RECOVERY_UNIT%40employ.oregon.gov&senderorganization=3DAwGEAAAAAoAAAAADAQAAAFowpb3jiNNJrvNwTIF4kldPVT1zdGF0ZW9mb3JlZ29uLm9ubWljcm9zb2Z0LmNvbSxPVT1NaWNyb3NvZnQgRXhjaGFuZ2UgSG9zdGVkIE9yZ2FuaXphdGlvbnMsREM9TkFNUFIwOUEwMDUsREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTdQ%2bo0m96UhPpfsQpf64c%2fBDTj1Db25maWd1cmF0aW9uLENOPXN0YXRlb2ZvcmVnb24ub25taWNyb3NvZnQuY29tLENOPUNvbmZpZ3VyYXRpb25Vbml0cyxEQz1OQU1QUjA5QTAwNSxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NAQ%3d%3d&messageid=3D%3cSJ0PR09MB66385A94F65919BD1CECC4178A499%40SJ0PR09MB6638.namprd09.prod.outlook.com%3e&cfmRecipient=3DSystemMailbox%7bD0E409A0-AF9B-4720-92FE-AAC869B0D201%7d%40stateoforegon.onmicrosoft.com&consumerEncryption=3Dfalse&senderorgid=3Daa3f6932-fa7c-47b4-a0ce-a598cad161cf&urldecoded=3D1&e4e_sdata=3Dc3T%2fKbZhNs3o9Kmi%2b0zUfx0tl8mt79Mp455f%2b%2bZRl7F7%2fPcKiR1iIUTwm8OABKhAEulntNoqizsfB4GoedshkDcdHT0CwPzOpQQZb82DhELIQiEPdqF2BlA5GiLVNMug2xiBGpw599c3S5QTIbMHtTiaJ0dRNGJFJwpxv98pUqNUcSwNuy5KgDgd2TnROfc7JL5T1QiuE5J7gpv%2fQ85tYMSQ9OxDTMOFtolVKGGAJ9YtsI7QYwvnE8vbYon3qZu4lD%2fpy3z3UKj99oXEwXE20WtwXRoLqLd9zYURd2L2s3aHHI2H0J91lmkOhtdXlQLz%2fx1EP5epyi8QLMWAacWldw%3d%3d
Malware Config
Signatures
-
A potential corporate email address has been identified in the URL: [email protected]