General
-
Target
https://attachments.office.net/owa/jimmir%40eltiempo.com/service.svc/s/GetAttachmentThumbnail?id=AQMkADkyMzY5ZmMxLTU3YjYtNGFlNy1iZTczLTBhNTBmMDVjMTNjMABGAAADYhk3Tp76DEicwDVyEVo4pwcAR0xPeEhykki7c7sWkXlpywAAAgEKAAAAR0xPeEhykki7c7sWkXlpywABuIFhGwAAAAESABAAlzZVH5i17UqZl8io4zSV7Q%3D%3D&thumbnailType=2&token=eyJhbGciOiJSUzI1NiIsImtpZCI6IjczRkI5QkJFRjYzNjc4RDRGN0U4NEI0NDBCQUJCMTJBMzM5RDlGOTgiLCJ0eXAiOiJKV1QiLCJ4NXQiOiJjX3VidnZZMmVOVDM2RXRFQzZ1eEtqT2RuNWcifQ.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.th1Cp4rb3mPaOO2kB3v_IF4rkfUEQNeZy6lDwM7TSYcnPi_kM49LGYK57-fw0A13-prGJU9tkgBo6Js8FQdI0ER3eNxFUdZv637GzKLCZrGva_fJ3NOh3hZVR6ENZc26NJefn1_dy-a84ALTjw0HjRWJ_2ngCfMxyInrjWvyWU2ZL1yJ4_r9c-YBFpJ0VVKyC0H1hrMzHu_A6-hb1zoO_mpiSx9LLvWRD-WxzhXqAe5wY7Dv1fYhsD3NMZpGa_a165NkJIDqRtarnIpx30TQyDDuoRnXmGPE4oe3v7U1LolbcoBEYM-4vIrMPBO3B8Vh5J3rDf9kUaiwXM5Beuai2g&X-OWA-CANARY=W3U48W4KQEicPsPXthlQt9DXpk3ypNsYoa-cYUoXDnoM_LBkVnks-WXTm199VS1LrT6rvGp_6hU.&owa=outlook.office.com&scriptVer=20230818006.04&animation=true
Malware Config
Signatures
-
A potential corporate email address has been identified in the URL: [email protected]