General
-
Target
https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=soc%40dkbinnovative.net&senderemailaddress=ccooper%40siskiyoucu.org&senderorganization=AwGEAAAAAoAAAAADAQAAAJWynkaoNeRCq8ue2vXBepBPVT1zaXNraXlvdWN1MzY1Lm9ubWljcm9zb2Z0LmNvbSxPVT1NaWNyb3NvZnQgRXhjaGFuZ2UgSG9zdGVkIE9yZ2FuaXphdGlvbnMsREM9TkFNUFIxN0EwMDcsREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTQ1aPTi47bdMlQMa3ANfYMRDTj1Db25maWd1cmF0aW9uLENOPXNpc2tpeW91Y3UzNjUub25taWNyb3NvZnQuY29tLENOPUNvbmZpZ3VyYXRpb25Vbml0cyxEQz1OQU1QUjE3QTAwNyxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NAQ%3d%3d&messageid=%3cPH7PR16MB5949F23421230AC77A7BAD2AA9682%40PH7PR16MB5949.namprd16.prod.outlook.com%3e&cfmRecipient=SystemMailbox%7b0AF09B7F-434F-4B2F-9CBC-57639EDCFD9C%7d%40siskiyoucu365.onmicrosoft.com&consumerEncryption=false&senderorgid=b9bd677d-660d-4e30-a5ee-994f005fea65&urldecoded=1&e4e_sdata=n6OmHhZw2uJIfoZVjxaAN%2f75Cg4H08KnQfg%2fQtUIZmdURlTeEuTvN1SWZ1y9FnlIahauRMlrgxiNSUL7DBqPYN4LxAxplSDS%2byTAF6aNNAmLvO7E4ERIFudmH1O3LngQxPfBilCIGkXSDKOqocxlQL2GPYzBthuEw%2bC7GOom74DMIi4AtxwBYDC17%2bJSHNrPFXDRChHZGyQaG0JVt9S2%2fx1LiNG%2bjxHnEH2DEaWDSYlsa3qJygq4EZtlaeYRlE3YFM6uVo8rPy8KxOmoaYaR1JPmtTr3oyLQFeiryZOJykAvz3ypLADTckC2O%2bVfSpeDkp%2b3k9553VbiRdaX3%2bepmQ%3d%3d
Malware Config
Signatures
-
A potential corporate email address has been identified in the URL: <PH7PR16MB5949F23421230AC77A7BAD2AA9682@PH7PR16MB5949.namprd16.prod.outlook.com>