General
-
Target
https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=lisa.ramos@lakeforestbank.com&[email protected]&senderorganization=AwF/AAAAAnsAAAADAQAAAHNGBljCjudIhdDM0ds7khZPVT1zZWxmaGVscC5vbm1pY3Jvc29mdC5jb20sT1U9TWljcm9zb2Z0IEV4Y2hhbmdlIEhvc3RlZCBPcmdhbml6YXRpb25zLERDPU5BTVBSMDdBMDA0LERDPXByb2QsREM9b3V0bG9vayxEQz1jb21+wCuzU+m5SrJlHEdL5TdSQ049Q29uZmlndXJhdGlvbixDTj1zZWxmaGVscC5vbm1pY3Jvc29mdC5jb20sQ049Q29uZmlndXJhdGlvblVuaXRzLERDPU5BTVBSMDdBMDA0LERDPXByb2QsREM9b3V0bG9vayxEQz1jb20B&messageid=<DM6PR07MB46502F9E362DB40802F439F6F9E3A@DM6PR07MB4650.namprd07.prod.outlook.com>&cfmRecipient=SystemMailbox{D0E409A0-AF9B-4720-92FE-AAC869B0D201}@selfhelp.onmicrosoft.com&consumerEncryption=false&senderorgid=a5294653-d816-497c-9e00-a21fa49baeaf&urldecoded=1&e4e_sdata=s1xoDeunh1Ufn0BiEi108v/fK1tTyAyQE17OZv6GPjXwcKH6SveFjax+mqxRike1GvlSm/KohczTIqSDKYmCttbqYpQnAKCPQS4xPJRmS0nR/XHF9qicrFPoGVonZkatdpo8DvWajzYMdKo+a5CxoCIHP/6F5y2Mb7r/UgBZ5pILjtjqbK1nb+1F4srOnUfe2kFmKWEciLjxXaqWmV6bOSwAMNQ3iVvDUXoe/qQ4BnUjWYvBbHQYcAfn63x16TYicoVgvvqnVx9AksWmuxF2oTYPV0/q29/qDmGKw8sj1i+KPO/Ia2WDTVLl1InirgZpqTe2joYnaYVGuxNal/DgXQ==
Malware Config
Signatures
-
A potential corporate email address has been identified in the URL: [email protected]