hxxps://na3[.]docusign[.]net/Signing/EmailStart[.]aspx?a=61c97487-1e0b-48cc-b160-76277af7d38e&acct=e94fc92e-acef-4ade-8772-37c89c52b40b&er=789ca0d5-5798-4dca-8d19-eb8b6693c82d","hxxps://na3[.]docusign[.]net/Signing/EmailStart[.]aspx?a=61c97487-1e0b-48cc-b160-76277af7d38e&acct=e94fc92e-acef-4ade-8772-37c89c52b40b&er=789ca0d5-5798-4dca-8d19-eb8b6693c82d&AspxAutoDetectCookieSupport=1","hxxps://na3[.]docusign[.]net/Signing/(X(1)S(qaq34fk35wjogyatsdpfci53))/EmailStart[.]aspx?a=61c97487-1e0b-48cc-b160-76277af7d38e&acct=e94fc92e-acef-4ade-8772-37c89c52b40b&er=789ca0d5-5798-4dca-8d19-eb8b6693c82d&AspxAutoDetectCookieSupport=1","hxxps://na3[.]docusign[.]net/Signing-AppDA1FE96_8832/(X(1)S(qaq34fk35wjogyatsdpfci53))/CookiesRequired[.]aspx

General

Target

https://na3.docusign.net/Signing/EmailStart.aspx?a=61c97487-1e0b-48cc-b160-76277af7d38e&acct=e94fc92e-acef-4ade-8772-37c89c52b40b&er=789ca0d5-5798-4dca-8d19-eb8b6693c82d","https://na3.docusign.net/Signing/EmailStart.aspx?a=61c97487-1e0b-48cc-b160-76277af7d38e&acct=e94fc92e-acef-4ade-8772-37c89c52b40b&er=789ca0d5-5798-4dca-8d19-eb8b6693c82d&AspxAutoDetectCookieSupport=1","https://na3.docusign.net/Signing/(X(1)S(qaq34fk35wjogyatsdpfci53))/EmailStart.aspx?a=61c97487-1e0b-48cc-b160-76277af7d38e&acct=e94fc92e-acef-4ade-8772-37c89c52b40b&er=789ca0d5-5798-4dca-8d19-eb8b6693c82d&AspxAutoDetectCookieSupport=1","https://na3.docusign.net/Signing-AppDA1FE96_8832/(X(1)S(qaq34fk35wjogyatsdpfci53))/CookiesRequired.aspx
Sample

231013-qf1x7aaa4s

Score

5^/10

docusign phishing

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance