General
-
Target
https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=Destiny.Geer%40mt.gov&senderemailaddress=sarah%40bozemanos.com&senderorganization=AwGAAAAAAnwAAAADAQAAANNXDjXlRtpEuVIdMbUQTrtPVT1ib3plbWFub3Mub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1OQU1QUjEzQTAwNCxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NFSkBHqSY8E2rvCuFIPLDQkNOPUNvbmZpZ3VyYXRpb24sQ049Ym96ZW1hbm9zLm9ubWljcm9zb2Z0LmNvbSxDTj1Db25maWd1cmF0aW9uVW5pdHMsREM9TkFNUFIxM0EwMDQsREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTQE%3d&messageid=%3cCH2PR13MB3509B066941DA4349E5216ECB0CDA%40CH2PR13MB3509.namprd13.prod.outlook.com%3e&cfmRecipient=SystemMailbox%7b0AF09B7F-434F-4B2F-9CBC-57639EDCFD9C%7d%40bozemanos.onmicrosoft.com&consumerEncryption=false&senderorgid=e9ab90b3-b937-4121-b387-b347f76e8a0e&urldecoded=1&e4e_sdata=lvLjmr4ocZKYcs8sVAIB%2bO3x40aWrw0%2foE6Ym%2fOQxU1TYMk3wz3B43wjftCAhfIrl0hZ6CHXpVibkvLfhoYVjbDWy%2fWKUuO1euj%2fV9pspbj94hwoASg450msmpwwTdp0CHVaXi0wdid3ZTlAEUh1OYYA0gHdMn5k4SbbpdWLT%2fMdv3TsI1LTbWJln47vvBuy0zOv9WkGjgGDRwnk3pkD8joeLbdsAirJ0NQJjnyjjzl9Dr52W90lAi%2fnNNYpQqj666FS7V4V9ry1vE9elC%2bK1wbUmfuAWKGuvbveFVOMayQNyk57oO6AZsBbu5iqYNpqanv45TVXXgjqzONtEhzbIw%3d%3d
Malware Config
Signatures
-
A potential corporate email address has been identified in the URL: [email protected]