General

  • Target

    https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=lisa.ramos%40lakeforestbank.com&senderemailaddress=aluna%40self-help.org&senderorganization=AwF%2fAAAAAnsAAAADAQAAAHNGBljCjudIhdDM0ds7khZPVT1zZWxmaGVscC5vbm1pY3Jvc29mdC5jb20sT1U9TWljcm9zb2Z0IEV4Y2hhbmdlIEhvc3RlZCBPcmdhbml6YXRpb25zLERDPU5BTVBSMDdBMDA0LERDPXByb2QsREM9b3V0bG9vayxEQz1jb21%2bwCuzU%2bm5SrJlHEdL5TdSQ049Q29uZmlndXJhdGlvbixDTj1zZWxmaGVscC5vbm1pY3Jvc29mdC5jb20sQ049Q29uZmlndXJhdGlvblVuaXRzLERDPU5BTVBSMDdBMDA0LERDPXByb2QsREM9b3V0bG9vayxEQz1jb20B&messageid=%3cDM6PR07MB46502F9E362DB40802F439F6F9E3A%40DM6PR07MB4650.namprd07.prod.outlook.com%3e&cfmRecipient=SystemMailbox%7bD0E409A0-AF9B-4720-92FE-AAC869B0D201%7d%40selfhelp.onmicrosoft.com&consumerEncryption=false&senderorgid=a5294653-d816-497c-9e00-a21fa49baeaf&urldecoded=1&e4e_sdata=s1xoDeunh1Ufn0BiEi108v%2ffK1tTyAyQE17OZv6GPjXwcKH6SveFjax%2bmqxRike1GvlSm%2fKohczTIqSDKYmCttbqYpQnAKCPQS4xPJRmS0nR%2fXHF9qicrFPoGVonZkatdpo8DvWajzYMdKo%2ba5CxoCIHP%2f6F5y2Mb7r%2fUgBZ5pILjtjqbK1nb%2b1F4srOnUfe2kFmKWEciLjxXaqWmV6bOSwAMNQ3iVvDUXoe%2fqQ4BnUjWYvBbHQYcAfn63x16TYicoVgvvqnVx9AksWmuxF2oTYPV0%2fq29%2fqDmGKw8sj1i%2bKPO%2fIa2WDTVLl1InirgZpqTe2joYnaYVGuxNal%2fDgXQ%3d%3d

Score
8/10

Malware Config

Signatures

  • A potential corporate email address has been identified in the URL: SystemMailbox{D0E409A0-AF9B-4720-92FE-AAC869B0D201}@selfhelp.onmicrosoft.com

Files