URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://visit.teams.microsoft.com/webrtc-svc/api/route?tid=f2066202-08c0-4832-a4b4-7fa0855bb8ed&convId=19:meeting_NjdiMjk2ZDctNzBmMC00Yjc1LTgyMzgtOGJhOGM4MGE1OGY1@thread.v2&oid=a9cb798c-e00b-42d5-bc1f-92df3b99ee0c&JoinWebUrl=https%3a%2f%2fteams.microsoft.com%2fl%2fmeetup-join%2f19%253ameeting_NjdiMjk2ZDctNzBmMC00Yjc1LTgyMzgtOGJhOGM4MGE1OGY1%2540thread.v2%2f0%3fcontext%3d%257b%2522Tid%2522%253a%2522f2066202-08c0-4832-a4b4-7fa0855bb8ed%2522%252c%2522Oid%2522%253a%2522a9cb798c-e00b-42d5-bc1f-92df3b99ee0c%2522%257d%26webjoin%3dtrue%26unified%3dtrue&[email protected]&biz=0&aE=False&ssid=Q9nuuVfe7UC_7ekfsKrwcw2
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
https://visit.teams.microsoft.com/webrtc-svc/api/route?tid=f2066202-08c0-4832-a4b4-7fa0855bb8ed&convId=19:meeting_NjdiMjk2ZDctNzBmMC00Yjc1LTgyMzgtOGJhOGM4MGE1OGY1@thread.v2&oid=a9cb798c-e00b-42d5-bc1f-92df3b99ee0c&JoinWebUrl=https%3a%2f%2fteams.microsoft.com%2fl%2fmeetup-join%2f19%253ameeting_NjdiMjk2ZDctNzBmMC00Yjc1LTgyMzgtOGJhOGM4MGE1OGY1%2540thread.v2%2f0%3fcontext%3d%257b%2522Tid%2522%253a%2522f2066202-08c0-4832-a4b4-7fa0855bb8ed%2522%252c%2522Oid%2522%253a%2522a9cb798c-e00b-42d5-bc1f-92df3b99ee0c%2522%257d%26webjoin%3dtrue%26unified%3dtrue&[email protected]&biz=0&aE=False&ssid=Q9nuuVfe7UC_7ekfsKrwcw2
Resource
win10v2004-20231215-en
General
-
Target
https://visit.teams.microsoft.com/webrtc-svc/api/route?tid=f2066202-08c0-4832-a4b4-7fa0855bb8ed&convId=19:meeting_NjdiMjk2ZDctNzBmMC00Yjc1LTgyMzgtOGJhOGM4MGE1OGY1@thread.v2&oid=a9cb798c-e00b-42d5-bc1f-92df3b99ee0c&JoinWebUrl=https%3a%2f%2fteams.microsoft.com%2fl%2fmeetup-join%2f19%253ameeting_NjdiMjk2ZDctNzBmMC00Yjc1LTgyMzgtOGJhOGM4MGE1OGY1%2540thread.v2%2f0%3fcontext%3d%257b%2522Tid%2522%253a%2522f2066202-08c0-4832-a4b4-7fa0855bb8ed%2522%252c%2522Oid%2522%253a%2522a9cb798c-e00b-42d5-bc1f-92df3b99ee0c%2522%257d%26webjoin%3dtrue%26unified%3dtrue&[email protected]&biz=0&aE=False&ssid=Q9nuuVfe7UC_7ekfsKrwcw2
Malware Config
Signatures
-
A potential corporate email address has been identified in the URL: 19meetingNjdiMjk2ZDctNzBmMC00Yjc1LTgyMzgtOGJhOGM4MGE1OGY1@thread.v2