General

  • Target

    https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=jodi.ray%40renown.org&senderemailaddress=jodi.ray%40renown.org&senderorganization=AwGDAAAAAn8AAAADAQAAAK7Zh0q6zN9DuFf1nUkrQv9PVT1SZW5vd25oZWFsdGgub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1OQU1QUjE2QTAwOCxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09Ne0Ha1Ph990azfIBuAiLkvkNOPUNvbmZpZ3VyYXRpb24sQ049UmVub3duaGVhbHRoLm9ubWljcm9zb2Z0LmNvbSxDTj1Db25maWd1cmF0aW9uVW5pdHMsREM9TkFNUFIxNkEwMDgsREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTQE%3d&messageid=%3cMW4PR10MB5837A7075200C70F3CA9C57C81A6A%40MW4PR10MB5837.namprd10.prod.outlook.com%3e&cfmRecipient=SystemMailbox%7b0AF09B7F-434F-4B2F-9CBC-57639EDCFD9C%7d%40Renownhealth.onmicrosoft.com&consumerEncryption=false&senderorgid=54115126-19c9-4b52-84ab-b746e438359a&urldecoded=1&e4e_sdata=og%2b63LSyoLd%2bHyaeUnUbhuiZJ2yGXnWOaufAcZHRW4W7PYhUvHoDarGT0Zv3Q2jVyMxd%2bSKhmeRr4ni%2fXhs5COkVhpA6120CRBkHWtkcD%2b9mZ5XvO8SzAEofBf%2buWxxyefa8cg%2fAEj9LfoniYVF%2fRWO83DCAGaDyETeAsTetdjCq3csZBcyuuUpS5SLZ7VulcXsxK5uV9FKBZSgWNaz2DZ2mZOi6ICStScFXuiBcvgeQNwGTYVIEc9bwj3d4ptfXEDdnr%2fiZBCTzgfd4sb00N74REzKAUZ%2b7RpEL5W%2bvzH37FJt6bN8xzbKvm2H1R4T0lz0XFQYEM0mAuHxl85lfUw%3d%3d

Score
8/10

Malware Config

Signatures

  • A potential corporate email address has been identified in the URL: SystemMailbox{0AF09B7F-434F-4B2F-9CBC-57639EDCFD9C}@Renownhealth.onmicrosoft.com

Files