URLScan task
urlscan1
General
-
Target
https://attachments.office.net/owa/[email protected]/service.svc/s/GetAttachmentThumbnail?id=AAMkAGE1MDgwYzcyLTZhYTUtNDgyMy05ZDQyLTljOWUxMjljN2RmMgBGAAAAAACEmunnZVhQQLHpqubea6wQBwBbzcY7x5R3QY9e2JhrbznRAAAAAAEMAABbzcY7x5R3QY9e2JhrbznRAAH%2F%2B7TDAAACEgAQAEkwXJ1SgLhHqLyzMek1Y5kSABAAkgMM0Mldn0e13eG3zd9HfQ%3D%3D&thumbnailType=2&token=eyJhbGciOiJSUzI1NiIsImtpZCI6IjczRkI5QkJFRjYzNjc4RDRGN0U4NEI0NDBCQUJCMTJBMzM5RDlGOTgiLCJ0eXAiOiJKV1QiLCJ4NXQiOiJjX3VidnZZMmVOVDM2RXRFQzZ1eEtqT2RuNWcifQ.eyJvcmlnaW4iOiJodHRwczovL291dGxvb2sub2ZmaWNlLmNvbSIsInVjIjoiYjBmNmY3ZTMxY2Y1NGVhYWEzNWYxOTE5NWVkMmI3MmEiLCJzaWduaW5fc3RhdGUiOiJbXCJkdmNfbW5nZFwiLFwiZHZjX2NtcFwiLFwiZHZjX2RtamRcIixcImlua25vd25udHdrXCIsXCJrbXNpXCJdIiwidmVyIjoiRXhjaGFuZ2UuQ2FsbGJhY2suVjEiLCJhcHBjdHhzZW5kZXIiOiJPd2FEb3dubG9hZEBhMDExMjhhNC1lM2U0LTQzNGMtOGFkNC1iM2Y3OTExNjU1Y2IiLCJpc3NyaW5nIjoiV1ciLCJhcHBjdHgiOiJ7XCJtc2V4Y2hwcm90XCI6XCJvd2FcIixcInB1aWRcIjpcIjExNTM4MDExMjQyNTU5NzcwNjJcIixcInNjb3BlXCI6XCJPd2FEb3dubG9hZFwiLFwib2lkXCI6XCIwZjNiNzA4NC1hNTZlLTRhMGQtOWQzOS1iMzFiNTY5OWQ2YzNcIixcInByaW1hcnlzaWRcIjpcIlMtMS01LTIxLTM3Njc1NjE2MzMtNDI2MDE4MTk4Mi04ODQxMjgyMC0yNzgxNDkxNlwifSIsIm5iZiI6MTY5NzA3MzM2NSwiZXhwIjoxNjk3MDczOTY1LCJpc3MiOiIwMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDBAYTAxMTI4YTQtZTNlNC00MzRjLThhZDQtYjNmNzkxMTY1NWNiIiwiYXVkIjoiMDAwMDAwMDItMDAwMC0wZmYxLWNlMDAtMDAwMDAwMDAwMDAwL2F0dGFjaG1lbnRzLm9mZmljZS5uZXRAYTAxMTI4YTQtZTNlNC00MzRjLThhZDQtYjNmNzkxMTY1NWNiIiwiaGFwcCI6Im93YSJ9.GmFrVE_kuf1oM8okCyMfMf7rZ9vFUtiJgVFH8h2k0cXY5iG-rJWM-K7kTgBK3MDp0-piGwNbAFeVhGaidfiw4yAW6yRDyrZ9njwQPdKkGkz-ViiHQ7WNH2Nv595aH-djRQ6PMkUi-VJsC9ZXZ7oKdyVna56tZCJ0BbhRwk5Ixr1z1L42TP3BIKl0mwBnljmiO7wg7Jnd3tYmmx9ErV3JoG8wlPpncDiUmZu0HnZmsnP6hgVmlLx7XOoFiwnhXsi3ojU-oZgigEMtmePRlt3uckVx4KbCdTTXL-DK5d-6xUsaOrAfDcekwVn5qAgJYqrYzu_LG2FKjkhQFmh3JZE3VA&X-OWA-CANARY=18edlNXngk-VVxtKFCZu9sC2h5viytsYVLByJwuzZLEcFAXZls5M4bX_4DIvWegmux5uLQHlvx4.&owa=outlook.office.com&scriptVer=20230922005.27&animation=true
Malware Config
Signatures
-
A potential corporate email address has been identified in the URL: [email protected]