General
-
Target
https://attachments.office.net/owa/jimmir%40eltiempo.com/service.svc/s/GetAttachmentThumbnail?id=AQMkADkyMzY5ZmMxLTU3YjYtNGFlNy1iZTczLTBhNTBmMDVjMTNjMABGAAADYhk3Tp76DEicwDVyEVo4pwcAR0xPeEhykki7c7sWkXlpywAAAgEMAAAAR0xPeEhykki7c7sWkXlpywAB0uxxJAAAAAESABAAcy3F30hbB0mmS1U2T%2BHjiA%3D%3D&thumbnailType=2&token=eyJhbGciOiJSUzI1NiIsImtpZCI6IjczRkI5QkJFRjYzNjc4RDRGN0U4NEI0NDBCQUJCMTJBMzM5RDlGOTgiLCJ0eXAiOiJKV1QiLCJ4NXQiOiJjX3VidnZZMmVOVDM2RXRFQzZ1eEtqT2RuNWcifQ.eyJvcmlnaW4iOiJodHRwczovL291dGxvb2sub2ZmaWNlLmNvbSIsInVjIjoiOGI3NWM1ZDY5MmVhNGM1OWE0NTBiODE2ZGY3MmU0ZTQiLCJzaWduaW5fc3RhdGUiOiJbXCJrbXNpXCJdIiwidmVyIjoiRXhjaGFuZ2UuQ2FsbGJhY2suVjEiLCJhcHBjdHhzZW5kZXIiOiJPd2FEb3dubG9hZEA2NWU1OGQ5OS0xNzgwLTRlNWItYTY4Mi0wZjQ3YzQ3MzNmODQiLCJpc3NyaW5nIjoiU0lQIiwiYXBwY3R4Ijoie1wibXNleGNocHJvdFwiOlwib3dhXCIsXCJwdWlkXCI6XCIxMTUzODAxMTIwODYzNzk1NjE3XCIsXCJzY29wZVwiOlwiT3dhRG93bmxvYWRcIixcIm9pZFwiOlwiYTVhM2RmYzQtNGU5OC00ZWZkLWJlYTAtYjU0OGQyMTQyNmRlXCIsXCJwcmltYXJ5c2lkXCI6XCJTLTEtNS0yMS0xODAzOTYxNTIyLTc4NzA0MzU0NS0xMjUxODQyODQxLTI3NDAyMzgwXCJ9IiwibmJmIjoxNjk2MzYwNTY2LCJleHAiOjE2OTYzNjExNjYsImlzcyI6IjAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMEA2NWU1OGQ5OS0xNzgwLTRlNWItYTY4Mi0wZjQ3YzQ3MzNmODQiLCJhdWQiOiIwMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAvYXR0YWNobWVudHMub2ZmaWNlLm5ldEA2NWU1OGQ5OS0xNzgwLTRlNWItYTY4Mi0wZjQ3YzQ3MzNmODQiLCJoYXBwIjoib3dhIn0.GZZSERKaKydEoqjofZL0kAfsGNZECTRHCjHFVjjJgbPVCNxqtXlk3tvknEschFR_9BW6WCN36cv2pkbRkTwwZ2Eoo7b2pdp0X2yCvZstBiOP0PgXrxx1W-F-YBVlWrlsGDb-BSoQh5iBfcPGxKoanpu-BTgvPeEXN0nTXx8q7MyZ5HZxF73Bo-YVFTokioYgchs8sP16ch-Tt8YtQJz-CfOouTaof73TI64wzSS-z9iBNLEYLiDpKrtN_2o6NiSsb9N1xJoaBNxqX4bNKnayEDj78HX_bM1FZmM_x1a0PHqiu-OoJ6a5i0t-UR5mS5HnVPJHMhgUNl25DNi2DUhNfw&X-OWA-CANARY=XuPWItNrnEKx9OJ427oD3FBgy6hFxNsYeexpNp50A5qyeHVS3jpnZPya8smd8c0np3NihPuuCK8.&owa=outlook.office.com&scriptVer=20230922005.15&animation=true
Malware Config
Signatures
-
A potential corporate email address has been identified in the URL: [email protected]