hxxps://usc-excel[.]officeapps[.]live[.]com/x/_layouts/XlFileHandler[.]aspx?id=WOPIsrc%3Dhttps%253A%252F%252Fbnainc365%252Esharepoint%252Ecom%252Fexecutive%252F%255Fvti%255Fbin%252Fwopi%252Eashx%252Ffiles%252F978d4c8cbaf14cbb8bc2576a142a8725%26access_token%3DeyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkdBZHhXWDNxZy1wbFA0ZTlYQlAxeTE2aWZqVSJ9%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%252EOb%255Fkwzu7GmSkAUWhnwgDnjVtGIHYio4JFlIUstTFUQLrmVr32JTE27l53922j27k4TfdF2vyTxlhXDrVCCiHeGYKs9kXsOkda9%252DprTP9Xt66OOIR71C%255FRrpC5XtXwlK%252DKKZ2ivXN57dRsu7CVqlRfZ5EsiU7iJdm%255FCR20EP2wh0%255F1kA0e%252Dd3PixxDgofx6SXEQnQsgzoJ%255Fh99Q7U9r%252D2uk9Lxo32d4auojCk87Xg7ggAUbTgh3nL0zvD2x9SVUK2AS7zhhuUrTnO2hYJnqABtWg1ZGENBHYHzaSybCI2zUgozA1Jw9Kno%252DQ%255FcrH4uIeE%252DID%252DqZKBwIN60fsKPCRqDQ%26access_token_ttl%3D1704761959826&sessionId=15[.]BL6PEPF00007ADE1[.]A108[.]1[.]U36[.]9005a94d-8f9c-4d87-82b5-9c86962d3ef914[.]5[.]en-US5[.]en-US16[.]10037ffe8bfecda21[.]S24[.]JzAAqPAUe0qF49kOrUGACA%3D%3D16[.]16[.]0[.]17230[.]4230614[.]5[.]en-US5[.]en-US1[.]M1[.]N0[.]1[.]S&workbookType=FullWorkbook&workbookFileType=Odf&WacUserType=WOPI&NoAuth=1

Sharing

Behavioral task

behavioral1

Sample

https://usc-excel.officeapps.live.com/x/_layouts/XlFileHandler.aspx?id=WOPIsrc%3Dhttps%253A%252F%252Fbnainc365%252Esharepoint%252Ecom%252Fexecutive%252F%255Fvti%255Fbin%252Fwopi%252Eashx%252Ffiles%252F978d4c8cbaf14cbb8bc2576a142a8725%26access_token%3DeyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkdBZHhXWDNxZy1wbFA0ZTlYQlAxeTE2aWZqVSJ9%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%252EOb%255Fkwzu7GmSkAUWhnwgDnjVtGIHYio4JFlIUstTFUQLrmVr32JTE27l53922j27k4TfdF2vyTxlhXDrVCCiHeGYKs9kXsOkda9%252DprTP9Xt66OOIR71C%255FRrpC5XtXwlK%252DKKZ2ivXN57dRsu7CVqlRfZ5EsiU7iJdm%255FCR20EP2wh0%255F1kA0e%252Dd3PixxDgofx6SXEQnQsgzoJ%255Fh99Q7U9r%252D2uk9Lxo32d4auojCk87Xg7ggAUbTgh3nL0zvD2x9SVUK2AS7zhhuUrTnO2hYJnqABtWg1ZGENBHYHzaSybCI2zUgozA1Jw9Kno%252DQ%255FcrH4uIeE%252DID%252DqZKBwIN60fsKPCRqDQ%26access_token_ttl%3D1704761959826&sessionId=15.BL6PEPF00007ADE1.A108.1.U36.9005a94d-8f9c-4d87-82b5-9c86962d3ef914.5.en-US5.en-US16.10037ffe8bfecda21.S24.JzAAqPAUe0qF49kOrUGACA%3D%3D16.16.0.17230.4230614.5.en-US5.en-US1.M1.N0.1.S&workbookType=FullWorkbook&workbookFileType=Odf&WacUserType=WOPI&NoAuth=1

Resource

win7-20231215-en

windows7-x64

6 signatures

1200 seconds

General

Target

https://usc-excel.officeapps.live.com/x/_layouts/XlFileHandler.aspx?id=WOPIsrc%3Dhttps%253A%252F%252Fbnainc365%252Esharepoint%252Ecom%252Fexecutive%252F%255Fvti%255Fbin%252Fwopi%252Eashx%252Ffiles%252F978d4c8cbaf14cbb8bc2576a142a8725%26access_token%3DeyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkdBZHhXWDNxZy1wbFA0ZTlYQlAxeTE2aWZqVSJ9%252EeyJhdWQiOiJ3b3BpL2JuYWluYzM2NS5zaGFyZXBvaW50LmNvbUBlNTlkOGZmNi01YzBjLTQ3MzItOWJhNC0yNmQ2ZGFhM2FjNGEiLCJpc3MiOiIwMDAwMDAwMy0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDBAOTAxNDAxMjItODUxNi0xMWUxLThlZmYtNDkzMDQ5MjQwMTliIiwibmJmIjoiMTcwNDcyNTk1OSIsImV4cCI6IjE3MDQ3NjE5NTkiLCJuYW1laWQiOiIwIy5mfG1lbWJlcnNoaXB8cHNwcmVjaGVyX2lkb3hzb2x1dGlvbnMuY29tI2V4dCNAYm5haW5jMzY1Lm9ubWljcm9zb2Z0LmNvbSIsIm5paSI6Im1pY3Jvc29mdC5zaGFyZXBvaW50IiwiaXN1c2VyIjoidHJ1ZSIsImNhY2hla2V5IjoiMGguZnxtZW1iZXJzaGlwfDEwMDMyMDAyYTJhNTc2NzlAbGl2ZS5jb20iLCJzaWQiOiI5MThhMTRmYi01YWVhLTRkZGQtOWEyNi1iMzcxYjNkZTVkYWUiLCJzaWduaW5fc3RhdGUiOiJbXCJrbXNpXCJdIiwieG1zX2NjIjoiW1wiQ1AxXCJdIiwiaXNsb29wYmFjayI6IlRydWUiLCJhcHBjdHgiOiI5NzhkNGM4Y2JhZjE0Y2JiOGJjMjU3NmExNDJhODcyNTtzVm1uTE5ZRFZ3Z25sK25RdWRBcER5V28yR2M9O0RlZmF1bHQ7OzFCMDNDNDMxMkVGO1RydWU7OzswOzJhYmNmZmEwLTMwYzYtNDAwMC1iNjViLTM2MTQ1OGFmMzg1NSIsImZpZCI6IjE5MzI2NyJ9%252EOb%255Fkwzu7GmSkAUWhnwgDnjVtGIHYio4JFlIUstTFUQLrmVr32JTE27l53922j27k4TfdF2vyTxlhXDrVCCiHeGYKs9kXsOkda9%252DprTP9Xt66OOIR71C%255FRrpC5XtXwlK%252DKKZ2ivXN57dRsu7CVqlRfZ5EsiU7iJdm%255FCR20EP2wh0%255F1kA0e%252Dd3PixxDgofx6SXEQnQsgzoJ%255Fh99Q7U9r%252D2uk9Lxo32d4auojCk87Xg7ggAUbTgh3nL0zvD2x9SVUK2AS7zhhuUrTnO2hYJnqABtWg1ZGENBHYHzaSybCI2zUgozA1Jw9Kno%252DQ%255FcrH4uIeE%252DID%252DqZKBwIN60fsKPCRqDQ%26access_token_ttl%3D1704761959826&sessionId=15.BL6PEPF00007ADE1.A108.1.U36.9005a94d-8f9c-4d87-82b5-9c86962d3ef914.5.en-US5.en-US16.10037ffe8bfecda21.S24.JzAAqPAUe0qF49kOrUGACA%3D%3D16.16.0.17230.4230614.5.en-US5.en-US1.M1.N0.1.S&workbookType=FullWorkbook&workbookFileType=Odf&WacUserType=WOPI&NoAuth=1

Sharing

General

Malware Config

Signatures

Files