URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=messages.4288384.134434.9c63c9c842%404288384.email.netsuite.com&senderemailaddress=Chandra.Reed-Wilkerson%40acgov.org&senderorganization=AwF9AAAAAnkAAAADAQAAAGVcNcDZ5OdOphCdt7lGrUhPVT1hY2dvdnQub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1OQU1QUjA5QTAwMSxEQz1wcm9kLERDPW91dGxvb2ssREM9Y29tKzdPopc6fk%2bMVM0I4XLlHkNOPUNvbmZpZ3VyYXRpb24sQ049YWNnb3Z0Lm9ubWljcm9zb2Z0LmNvbSxDTj1Db25maWd1cmF0aW9uVW5pdHMsREM9TkFNUFIwOUEwMDEsREM9cHJvZCxEQz1vdXRsb29rLERDPWNvbQE%3d&messageid=%3cSJ0PR09MB7327FE226978EB67842A9CA1C88FA%40SJ0PR09MB7327.namprd09.prod.outlook.com%3e&cfmRecipient=SystemMailbox%7b0AF09B7F-434F-4B2F-9CBC-57639EDCFD9C%7d%40acgovt.onmicrosoft.com&consumerEncryption=false&senderorgid=32fdff2c-f86e-4ba3-a47d-6a44a7f45a64&urldecoded=1&e4e_sdata=g9%2fRDgWyaEsit9YwTrKrDfMYuZGaE14Kw%2byA%2fWOOOpGMneVv%2fN8rtid%2b%2fXxy624i%2bZrOd2Kud0vId9m0ivFQEVCkhpsxi7gWamKbJG2UHwx6aC6tFE2RflZzCZMm7w7krqAWBS5yNvt3C4lhLeRN2Sed0g%2buhpmre7amjEuCBVzSEM20jG%2bGZa72uv4bju0SpK2GAonHUyOxSe5LFCz5eSUWCf2StiZ5weAZzqs48%2fidx4W98q145wPykxudsX1QxsB58JdlWv53oy9Wz0fcIimo5bMyXSo7yVKDh8Ru3ILrV25VZqpRT2XxRi7QXlgf0pMXLcQBfcaq4tCUmLhUTQ%3d%3d
Resource
win7-20231130-en
Behavioral task
behavioral2
Sample
https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=messages.4288384.134434.9c63c9c842%404288384.email.netsuite.com&senderemailaddress=Chandra.Reed-Wilkerson%40acgov.org&senderorganization=AwF9AAAAAnkAAAADAQAAAGVcNcDZ5OdOphCdt7lGrUhPVT1hY2dvdnQub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1OQU1QUjA5QTAwMSxEQz1wcm9kLERDPW91dGxvb2ssREM9Y29tKzdPopc6fk%2bMVM0I4XLlHkNOPUNvbmZpZ3VyYXRpb24sQ049YWNnb3Z0Lm9ubWljcm9zb2Z0LmNvbSxDTj1Db25maWd1cmF0aW9uVW5pdHMsREM9TkFNUFIwOUEwMDEsREM9cHJvZCxEQz1vdXRsb29rLERDPWNvbQE%3d&messageid=%3cSJ0PR09MB7327FE226978EB67842A9CA1C88FA%40SJ0PR09MB7327.namprd09.prod.outlook.com%3e&cfmRecipient=SystemMailbox%7b0AF09B7F-434F-4B2F-9CBC-57639EDCFD9C%7d%40acgovt.onmicrosoft.com&consumerEncryption=false&senderorgid=32fdff2c-f86e-4ba3-a47d-6a44a7f45a64&urldecoded=1&e4e_sdata=g9%2fRDgWyaEsit9YwTrKrDfMYuZGaE14Kw%2byA%2fWOOOpGMneVv%2fN8rtid%2b%2fXxy624i%2bZrOd2Kud0vId9m0ivFQEVCkhpsxi7gWamKbJG2UHwx6aC6tFE2RflZzCZMm7w7krqAWBS5yNvt3C4lhLeRN2Sed0g%2buhpmre7amjEuCBVzSEM20jG%2bGZa72uv4bju0SpK2GAonHUyOxSe5LFCz5eSUWCf2StiZ5weAZzqs48%2fidx4W98q145wPykxudsX1QxsB58JdlWv53oy9Wz0fcIimo5bMyXSo7yVKDh8Ru3ILrV25VZqpRT2XxRi7QXlgf0pMXLcQBfcaq4tCUmLhUTQ%3d%3d
Resource
win10v2004-20231130-en
General
-
Target
https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=messages.4288384.134434.9c63c9c842%404288384.email.netsuite.com&senderemailaddress=Chandra.Reed-Wilkerson%40acgov.org&senderorganization=AwF9AAAAAnkAAAADAQAAAGVcNcDZ5OdOphCdt7lGrUhPVT1hY2dvdnQub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1OQU1QUjA5QTAwMSxEQz1wcm9kLERDPW91dGxvb2ssREM9Y29tKzdPopc6fk%2bMVM0I4XLlHkNOPUNvbmZpZ3VyYXRpb24sQ049YWNnb3Z0Lm9ubWljcm9zb2Z0LmNvbSxDTj1Db25maWd1cmF0aW9uVW5pdHMsREM9TkFNUFIwOUEwMDEsREM9cHJvZCxEQz1vdXRsb29rLERDPWNvbQE%3d&messageid=%3cSJ0PR09MB7327FE226978EB67842A9CA1C88FA%40SJ0PR09MB7327.namprd09.prod.outlook.com%3e&cfmRecipient=SystemMailbox%7b0AF09B7F-434F-4B2F-9CBC-57639EDCFD9C%7d%40acgovt.onmicrosoft.com&consumerEncryption=false&senderorgid=32fdff2c-f86e-4ba3-a47d-6a44a7f45a64&urldecoded=1&e4e_sdata=g9%2fRDgWyaEsit9YwTrKrDfMYuZGaE14Kw%2byA%2fWOOOpGMneVv%2fN8rtid%2b%2fXxy624i%2bZrOd2Kud0vId9m0ivFQEVCkhpsxi7gWamKbJG2UHwx6aC6tFE2RflZzCZMm7w7krqAWBS5yNvt3C4lhLeRN2Sed0g%2buhpmre7amjEuCBVzSEM20jG%2bGZa72uv4bju0SpK2GAonHUyOxSe5LFCz5eSUWCf2StiZ5weAZzqs48%2fidx4W98q145wPykxudsX1QxsB58JdlWv53oy9Wz0fcIimo5bMyXSo7yVKDh8Ru3ILrV25VZqpRT2XxRi7QXlgf0pMXLcQBfcaq4tCUmLhUTQ%3d%3d
Malware Config
Signatures
-
A potential corporate email address has been identified in the URL: [email protected]