URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://outlook.office365.com/Encryption/store.ashx?urlversion=2&recipientemailaddress=dossettkristin%40johndeere.com&senderemailaddress=CherylPeterson%40HammondHenry.com&senderorganization=AwGDAAAAAn8AAAADAQAAACHeXE%2bLx5BJkn9dcUTSzJ1PVT1IYW1tb25kSGVucnkub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1OQU1QUjE1QTAwMSxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NpI1bGUwSOUO4tfqiwfovCkNOPUNvbmZpZ3VyYXRpb24sQ049SGFtbW9uZEhlbnJ5Lm9ubWljcm9zb2Z0LmNvbSxDTj1Db25maWd1cmF0aW9uVW5pdHMsREM9TkFNUFIxNUEwMDEsREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTQE%3d&routingemailaddress=CherylPeterson%40HammondHenry.com&usenewstack=True
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
https://outlook.office365.com/Encryption/store.ashx?urlversion=2&recipientemailaddress=dossettkristin%40johndeere.com&senderemailaddress=CherylPeterson%40HammondHenry.com&senderorganization=AwGDAAAAAn8AAAADAQAAACHeXE%2bLx5BJkn9dcUTSzJ1PVT1IYW1tb25kSGVucnkub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1OQU1QUjE1QTAwMSxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NpI1bGUwSOUO4tfqiwfovCkNOPUNvbmZpZ3VyYXRpb24sQ049SGFtbW9uZEhlbnJ5Lm9ubWljcm9zb2Z0LmNvbSxDTj1Db25maWd1cmF0aW9uVW5pdHMsREM9TkFNUFIxNUEwMDEsREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTQE%3d&routingemailaddress=CherylPeterson%40HammondHenry.com&usenewstack=True
Resource
win10v2004-20231215-en
General
-
Target
https://outlook.office365.com/Encryption/store.ashx?urlversion=2&recipientemailaddress=dossettkristin%40johndeere.com&senderemailaddress=CherylPeterson%40HammondHenry.com&senderorganization=AwGDAAAAAn8AAAADAQAAACHeXE%2bLx5BJkn9dcUTSzJ1PVT1IYW1tb25kSGVucnkub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1OQU1QUjE1QTAwMSxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NpI1bGUwSOUO4tfqiwfovCkNOPUNvbmZpZ3VyYXRpb24sQ049SGFtbW9uZEhlbnJ5Lm9ubWljcm9zb2Z0LmNvbSxDTj1Db25maWd1cmF0aW9uVW5pdHMsREM9TkFNUFIxNUEwMDEsREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTQE%3d&routingemailaddress=CherylPeterson%40HammondHenry.com&usenewstack=True
Malware Config
Signatures
-
A potential corporate email address has been identified in the URL: [email protected]