hxxps://usc-excel[.]officeapps[.]live[.]com/x/_layouts/XlFileHandler[.]aspx?id=WOPIsrc=https%3A%2F%2Fbnainc365%2Esharepoint%2Ecom%2Fexecutive%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2F978d4c8cbaf14cbb8bc2576a142a8725&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkdBZHhXWDNxZy1wbFA0ZTlYQlAxeTE2aWZqVSJ9%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%2EOb%5Fkwzu7GmSkAUWhnwgDnjVtGIHYio4JFlIUstTFUQLrmVr32JTE27l53922j27k4TfdF2vyTxlhXDrVCCiHeGYKs9kXsOkda9%2DprTP9Xt66OOIR71C%5FRrpC5XtXwlK%2DKKZ2ivXN57dRsu7CVqlRfZ5EsiU7iJdm%5FCR20EP2wh0%5F1kA0e%2Dd3PixxDgofx6SXEQnQsgzoJ%5Fh99Q7U9r%2D2uk9Lxo32d4auojCk87Xg7ggAUbTgh3nL0zvD2x9SVUK2AS7zhhuUrTnO2hYJnqABtWg1ZGENBHYHzaSybCI2zUgozA1Jw9Kno%2DQ%5FcrH4uIeE%2DID%2DqZKBwIN60fsKPCRqDQ&access_token_ttl=1704761959826&sessionId=15[.]BL6PEPF00007ADE1[.]A108[.]1[.]U36[.]9005a94d-8f9c-4d87-82b5-9c86962d3ef914[.]5[.]en-US5[.]en-US16[.]10037ffe8bfecda21[.]S24[.]JzAAqPAUe0qF49kOrUGACA==16[.]16[.]0[.]17230[.]4230614[.]5[.]en-US5[.]en-US1[.]M1[.]N0[.]1[.]S&workbookType=FullWorkbook&workbookFileType=Odf&WacUserType=WOPI&NoAuth=1

Sharing

Behavioral task

behavioral1

Sample

https://usc-excel.officeapps.live.com/x/_layouts/XlFileHandler.aspx?id=WOPIsrc=https%3A%2F%2Fbnainc365%2Esharepoint%2Ecom%2Fexecutive%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2F978d4c8cbaf14cbb8bc2576a142a8725&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkdBZHhXWDNxZy1wbFA0ZTlYQlAxeTE2aWZqVSJ9%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%2EOb%5Fkwzu7GmSkAUWhnwgDnjVtGIHYio4JFlIUstTFUQLrmVr32JTE27l53922j27k4TfdF2vyTxlhXDrVCCiHeGYKs9kXsOkda9%2DprTP9Xt66OOIR71C%5FRrpC5XtXwlK%2DKKZ2ivXN57dRsu7CVqlRfZ5EsiU7iJdm%5FCR20EP2wh0%5F1kA0e%2Dd3PixxDgofx6SXEQnQsgzoJ%5Fh99Q7U9r%2D2uk9Lxo32d4auojCk87Xg7ggAUbTgh3nL0zvD2x9SVUK2AS7zhhuUrTnO2hYJnqABtWg1ZGENBHYHzaSybCI2zUgozA1Jw9Kno%2DQ%5FcrH4uIeE%2DID%2DqZKBwIN60fsKPCRqDQ&access_token_ttl=1704761959826&sessionId=15.BL6PEPF00007ADE1.A108.1.U36.9005a94d-8f9c-4d87-82b5-9c86962d3ef914.5.en-US5.en-US16.10037ffe8bfecda21.S24.JzAAqPAUe0qF49kOrUGACA==16.16.0.17230.4230614.5.en-US5.en-US1.M1.N0.1.S&workbookType=FullWorkbook&workbookFileType=Odf&WacUserType=WOPI&NoAuth=1

Resource

win7-20231215-en

windows7-x64

8 signatures

1200 seconds

Behavioral task

behavioral2

Sample

Resource

win10v2004-20231215-en

windows10-2004-x64

8 signatures

1200 seconds

General

Target

https://usc-excel.officeapps.live.com/x/_layouts/XlFileHandler.aspx?id=WOPIsrc=https%3A%2F%2Fbnainc365%2Esharepoint%2Ecom%2Fexecutive%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2F978d4c8cbaf14cbb8bc2576a142a8725&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkdBZHhXWDNxZy1wbFA0ZTlYQlAxeTE2aWZqVSJ9%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%2EOb%5Fkwzu7GmSkAUWhnwgDnjVtGIHYio4JFlIUstTFUQLrmVr32JTE27l53922j27k4TfdF2vyTxlhXDrVCCiHeGYKs9kXsOkda9%2DprTP9Xt66OOIR71C%5FRrpC5XtXwlK%2DKKZ2ivXN57dRsu7CVqlRfZ5EsiU7iJdm%5FCR20EP2wh0%5F1kA0e%2Dd3PixxDgofx6SXEQnQsgzoJ%5Fh99Q7U9r%2D2uk9Lxo32d4auojCk87Xg7ggAUbTgh3nL0zvD2x9SVUK2AS7zhhuUrTnO2hYJnqABtWg1ZGENBHYHzaSybCI2zUgozA1Jw9Kno%2DQ%5FcrH4uIeE%2DID%2DqZKBwIN60fsKPCRqDQ&access_token_ttl=1704761959826&sessionId=15.BL6PEPF00007ADE1.A108.1.U36.9005a94d-8f9c-4d87-82b5-9c86962d3ef914.5.en-US5.en-US16.10037ffe8bfecda21.S24.JzAAqPAUe0qF49kOrUGACA==16.16.0.17230.4230614.5.en-US5.en-US1.M1.N0.1.S&workbookType=FullWorkbook&workbookFileType=Odf&WacUserType=WOPI&NoAuth=1

Sharing

General

Malware Config

Signatures

Files