URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=scooray%40eqt.com.au&senderemailaddress=laskowski%40pzena.com&senderorganization=AwF8AAAAAngAAAADAQAAAO7gqeqVYxhLlCDyCMaUAixPVT1wemVuYS5vbm1pY3Jvc29mdC5jb20sT1U9TWljcm9zb2Z0IEV4Y2hhbmdlIEhvc3RlZCBPcmdhbml6YXRpb25zLERDPU5BTVBSMjBBMDAxLERDPVBST0QsREM9T1VUTE9PSyxEQz1DT01o1P6ienCPS7nExVmLCgD1Q049Q29uZmlndXJhdGlvbixDTj1wemVuYS5vbm1pY3Jvc29mdC5jb20sQ049Q29uZmlndXJhdGlvblVuaXRzLERDPU5BTVBSMjBBMDAxLERDPVBST0QsREM9T1VUTE9PSyxEQz1DT00B&messageid=%3cCO6PR20MB36527164C4F35AF6C639BDCEA9C1A%40CO6PR20MB3652.namprd20.prod.outlook.com%3e&cfmRecipient=SystemMailbox%7b6C0A1EFA-EC06-4AF8-8120-E8DF728D24A6%7d%40pzena.onmicrosoft.com&consumerEncryption=false&senderorgid=2f199a9d-5e9e-453f-9a97-406a06557c15&urldecoded=1&e4e_sdata=jMtS5yocp5670ZprdtcFQdVgxi3fPo5MTECDP7DdO%2faZLbhEnVUD74HFNjhom7leYLUh2FRLLQfUQj9%2bW8Sk0QGtWl58EzDFegqbG%2br6ULY%2fIKqAMcvDbDH1Fo7nFORPkcLqYZmHZE3c8DRLtqPB5ZkUR5TIs9Tl6tMB2glWh7AUQvfEM493XMuDRWgcadI3kp7oGXQD5QjQTBhy%2fGUu75t93iXzr6WEwwgQW9QtMx9d8t%2bNhBbjvJe4jm66K66CLQnYsVeNAA7lzA5xK5RNidsxeixPty4k%2fby1ADZvDyqZdsujU8%2fkiwQCCklDJV0oQSRvVnqW2l%2bt%2fwF3g7vavA%3d%3d
Resource
win10v2004-20230915-en
General
-
Target
https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=scooray%40eqt.com.au&senderemailaddress=laskowski%40pzena.com&senderorganization=AwF8AAAAAngAAAADAQAAAO7gqeqVYxhLlCDyCMaUAixPVT1wemVuYS5vbm1pY3Jvc29mdC5jb20sT1U9TWljcm9zb2Z0IEV4Y2hhbmdlIEhvc3RlZCBPcmdhbml6YXRpb25zLERDPU5BTVBSMjBBMDAxLERDPVBST0QsREM9T1VUTE9PSyxEQz1DT01o1P6ienCPS7nExVmLCgD1Q049Q29uZmlndXJhdGlvbixDTj1wemVuYS5vbm1pY3Jvc29mdC5jb20sQ049Q29uZmlndXJhdGlvblVuaXRzLERDPU5BTVBSMjBBMDAxLERDPVBST0QsREM9T1VUTE9PSyxEQz1DT00B&messageid=%3cCO6PR20MB36527164C4F35AF6C639BDCEA9C1A%40CO6PR20MB3652.namprd20.prod.outlook.com%3e&cfmRecipient=SystemMailbox%7b6C0A1EFA-EC06-4AF8-8120-E8DF728D24A6%7d%40pzena.onmicrosoft.com&consumerEncryption=false&senderorgid=2f199a9d-5e9e-453f-9a97-406a06557c15&urldecoded=1&e4e_sdata=jMtS5yocp5670ZprdtcFQdVgxi3fPo5MTECDP7DdO%2faZLbhEnVUD74HFNjhom7leYLUh2FRLLQfUQj9%2bW8Sk0QGtWl58EzDFegqbG%2br6ULY%2fIKqAMcvDbDH1Fo7nFORPkcLqYZmHZE3c8DRLtqPB5ZkUR5TIs9Tl6tMB2glWh7AUQvfEM493XMuDRWgcadI3kp7oGXQD5QjQTBhy%2fGUu75t93iXzr6WEwwgQW9QtMx9d8t%2bNhBbjvJe4jm66K66CLQnYsVeNAA7lzA5xK5RNidsxeixPty4k%2fby1ADZvDyqZdsujU8%2fkiwQCCklDJV0oQSRvVnqW2l%2bt%2fwF3g7vavA%3d%3d
Malware Config
Signatures
-
A potential corporate email address has been identified in the URL: SystemMailbox{6C0A1EFA-EC06-4AF8-8120-E8DF728D24A6}@pzena.onmicrosoft.com