hxxps://attachments[.]office[.]net/owa/security@webcentral[.]com[.]au/service[.]svc/s/GetAttachmentThumbnail?id=AAMkADMzMjgzOTMxLWNiODctNDI5Mi04NDQ1LTlkZmQ4ZTZkMTFlNwBGAAAAAAAtr79wcnMtQqZc2TwLQpEzBwB%2FYvmDFiCoQYm%2FSQ6wdszfAAAAAAEMAAB%2FYvmDFiCoQYm%2FSQ6wdszfAAMuhAmmAAABEgAQAJH855H1jO1LsnNjZNuO7t0%3D&thumbnailType=2&token=eyJhbGciOiJSUzI1NiIsImtpZCI6IjczRkI5QkJFRjYzNjc4RDRGN0U4NEI0NDBCQUJCMTJBMzM5RDlGOTgiLCJ0eXAiOiJKV1QiLCJ4NXQiOiJjX3VidnZZMmVOVDM2RXRFQzZ1eEtqT2RuNWcifQ[.]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[.]MdELMhLNqsXVKqrp7QGJ3QMugvJtkil0zh7EV1UAL0dqj1DLppceR6J2mDefewvTihBzzxvgQwiRaVvt7IFV04L3re8z8uN3ipEGvCyR_NtqXiTBkuU2KqLEoax2NLvPWBoi6ffONRwlBh9wEo1n8U6zta94Q8Cxd66lIWiUwoiiumiBWdhuMksZJbF0EtXtF06mFTzpdG9eAvgxlX9tMWSzhq67gS6iyJ1FUmnBmkr-l_Erg3N82CFhD2iQ0Nv7O0c2tsVfjTEfxUEEDRJGBJHajrTlubM_jCSpnYoC7vFxLBsS6e4F8u5gy9HolUQ5jrUu881FSP94JsvWuShd4g&X-OWA-CANARY=FRS5i_yDjEWgdvQ8068atKCmdfda2tsYPxukwBJG9eym1UQuxd-GLE5j8C2QYHmdaKYfjdxqeIs[.]&owa=outlook[.]office[.]com&scriptVer=20231020006[.]20&animation=true&persistenceId=d33cd3b2-b0ae-4941-8b90-a28d9e01a229

Sharing

Behavioral task

behavioral1

Sample

https://attachments.office.net/owa/[email protected]/service.svc/s/GetAttachmentThumbnail?id=AAMkADMzMjgzOTMxLWNiODctNDI5Mi04NDQ1LTlkZmQ4ZTZkMTFlNwBGAAAAAAAtr79wcnMtQqZc2TwLQpEzBwB%2FYvmDFiCoQYm%2FSQ6wdszfAAAAAAEMAAB%2FYvmDFiCoQYm%2FSQ6wdszfAAMuhAmmAAABEgAQAJH855H1jO1LsnNjZNuO7t0%3D&thumbnailType=2&token=eyJhbGciOiJSUzI1NiIsImtpZCI6IjczRkI5QkJFRjYzNjc4RDRGN0U4NEI0NDBCQUJCMTJBMzM5RDlGOTgiLCJ0eXAiOiJKV1QiLCJ4NXQiOiJjX3VidnZZMmVOVDM2RXRFQzZ1eEtqT2RuNWcifQ.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.MdELMhLNqsXVKqrp7QGJ3QMugvJtkil0zh7EV1UAL0dqj1DLppceR6J2mDefewvTihBzzxvgQwiRaVvt7IFV04L3re8z8uN3ipEGvCyR_NtqXiTBkuU2KqLEoax2NLvPWBoi6ffONRwlBh9wEo1n8U6zta94Q8Cxd66lIWiUwoiiumiBWdhuMksZJbF0EtXtF06mFTzpdG9eAvgxlX9tMWSzhq67gS6iyJ1FUmnBmkr-l_Erg3N82CFhD2iQ0Nv7O0c2tsVfjTEfxUEEDRJGBJHajrTlubM_jCSpnYoC7vFxLBsS6e4F8u5gy9HolUQ5jrUu881FSP94JsvWuShd4g&X-OWA-CANARY=FRS5i_yDjEWgdvQ8068atKCmdfda2tsYPxukwBJG9eym1UQuxd-GLE5j8C2QYHmdaKYfjdxqeIs.&owa=outlook.office.com&scriptVer=20231020006.20&animation=true&persistenceId=d33cd3b2-b0ae-4941-8b90-a28d9e01a229

Resource

win10v2004-20231020-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

Resource

android-x86-arm-20231023-en

evasion

android-9-x86

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

Resource

android-x64-20231023.1-en

evasion

android-10-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

Resource

android-x64-arm64-20231023-en

evasion

android-11-x64

1 signatures

150 seconds

General

Target

https://attachments.office.net/owa/[email protected]/service.svc/s/GetAttachmentThumbnail?id=AAMkADMzMjgzOTMxLWNiODctNDI5Mi04NDQ1LTlkZmQ4ZTZkMTFlNwBGAAAAAAAtr79wcnMtQqZc2TwLQpEzBwB%2FYvmDFiCoQYm%2FSQ6wdszfAAAAAAEMAAB%2FYvmDFiCoQYm%2FSQ6wdszfAAMuhAmmAAABEgAQAJH855H1jO1LsnNjZNuO7t0%3D&thumbnailType=2&token=eyJhbGciOiJSUzI1NiIsImtpZCI6IjczRkI5QkJFRjYzNjc4RDRGN0U4NEI0NDBCQUJCMTJBMzM5RDlGOTgiLCJ0eXAiOiJKV1QiLCJ4NXQiOiJjX3VidnZZMmVOVDM2RXRFQzZ1eEtqT2RuNWcifQ.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.MdELMhLNqsXVKqrp7QGJ3QMugvJtkil0zh7EV1UAL0dqj1DLppceR6J2mDefewvTihBzzxvgQwiRaVvt7IFV04L3re8z8uN3ipEGvCyR_NtqXiTBkuU2KqLEoax2NLvPWBoi6ffONRwlBh9wEo1n8U6zta94Q8Cxd66lIWiUwoiiumiBWdhuMksZJbF0EtXtF06mFTzpdG9eAvgxlX9tMWSzhq67gS6iyJ1FUmnBmkr-l_Erg3N82CFhD2iQ0Nv7O0c2tsVfjTEfxUEEDRJGBJHajrTlubM_jCSpnYoC7vFxLBsS6e4F8u5gy9HolUQ5jrUu881FSP94JsvWuShd4g&X-OWA-CANARY=FRS5i_yDjEWgdvQ8068atKCmdfda2tsYPxukwBJG9eym1UQuxd-GLE5j8C2QYHmdaKYfjdxqeIs.&owa=outlook.office.com&scriptVer=20231020006.20&animation=true&persistenceId=d33cd3b2-b0ae-4941-8b90-a28d9e01a229

Score

8^/10

phishing

Malware Config

Signatures

A potential corporate email address has been identified in the URL: [email protected]
phishing

Sharing

General

Malware Config

Signatures

Files