hxxp://attachments[.]office[.]net/owa/cfc@SempraGlobal[.]com/service[.]svc/s/GetAttachmentThumbnail?id=AAMkAGVhMDk1MjgxLTJiYzktNGIwOS1hMWY0LTA0NGZhMWExN2M5MwBGAAAAAAAKuxJTCRsdTJa5IM%2FXuN0rBwC%2BqAPgh0bZTYjOuRcxAfFoAAAD2CCSAAC%2BqAPgh0bZTYjOuRcxAfFoAAAzCp%2BaAAABEgAQANA3ST6HPOdMjwX5aPIjpHQ%3D&thumbnailType=2&token=eyJhbGciOiJSUzI1NiIsImtpZCI6IkU1RDJGMEY4REE5M0I2NzA5QzQzQTlFOEE2MTQzQzAzRDYyRjlBODAiLCJ0eXAiOiJKV1QiLCJ4NXQiOiI1ZEx3LU5xVHRuQ2NRNm5vcGhROEE5WXZtb0EifQ[.]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[.]G7yYS1yHrus2PpWOTVj3P2nG6SOizBDJDg6PKmi9A7N4IurF6vEBMOuoGKfmoCy2nurbvwM3EWPrDZntBsuR37VI_Tkgpzg4YMWhaPPYh2HBHnavEZtmUEoMomJg29g15_QhbCHSjZ3gVNLD0s1QLG7wvwqATE8m6DcJmHbRJAtu8GDebkfHyFmOnEcQmQVQFYQMRec26fmGhYUNTNxuyISNDAO270g93CausraunMVe0JaKeV0hFcYRtTcukR5Lo2XK7g7R9Y5TiKudEZaHi5SXMC9J9C8J0gHrAuAyYRz08RQWwN0EojO7KbkOqrrdtIZcSUddPKEMhsnFT9vpWg&X-OWA-CANARY=Uep2pOxYQE-Uhv3i59Nu9mD9xN-hHtwYriCRI-RUQAn3FKfz4l-54B0ziEQeDtYTaDUvJawRB3Y[.]&owa=outlook[.]office[.]com&scriptVer=20240119003[.]09&clientId=B4144075E56B49B8B17745F02C1B9A1F&animation=true

Sharing

Behavioral task

behavioral1

Sample

http://attachments.office.net/owa/[email protected]/service.svc/s/GetAttachmentThumbnail?id=AAMkAGVhMDk1MjgxLTJiYzktNGIwOS1hMWY0LTA0NGZhMWExN2M5MwBGAAAAAAAKuxJTCRsdTJa5IM%2FXuN0rBwC%2BqAPgh0bZTYjOuRcxAfFoAAAD2CCSAAC%2BqAPgh0bZTYjOuRcxAfFoAAAzCp%2BaAAABEgAQANA3ST6HPOdMjwX5aPIjpHQ%3D&thumbnailType=2&token=eyJhbGciOiJSUzI1NiIsImtpZCI6IkU1RDJGMEY4REE5M0I2NzA5QzQzQTlFOEE2MTQzQzAzRDYyRjlBODAiLCJ0eXAiOiJKV1QiLCJ4NXQiOiI1ZEx3LU5xVHRuQ2NRNm5vcGhROEE5WXZtb0EifQ.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.G7yYS1yHrus2PpWOTVj3P2nG6SOizBDJDg6PKmi9A7N4IurF6vEBMOuoGKfmoCy2nurbvwM3EWPrDZntBsuR37VI_Tkgpzg4YMWhaPPYh2HBHnavEZtmUEoMomJg29g15_QhbCHSjZ3gVNLD0s1QLG7wvwqATE8m6DcJmHbRJAtu8GDebkfHyFmOnEcQmQVQFYQMRec26fmGhYUNTNxuyISNDAO270g93CausraunMVe0JaKeV0hFcYRtTcukR5Lo2XK7g7R9Y5TiKudEZaHi5SXMC9J9C8J0gHrAuAyYRz08RQWwN0EojO7KbkOqrrdtIZcSUddPKEMhsnFT9vpWg&X-OWA-CANARY=Uep2pOxYQE-Uhv3i59Nu9mD9xN-hHtwYriCRI-RUQAn3FKfz4l-54B0ziEQeDtYTaDUvJawRB3Y.&owa=outlook.office.com&scriptVer=20240119003.09&clientId=B4144075E56B49B8B17745F02C1B9A1F&animation=true

Resource

win7-20231129-en

windows7-x64

9 signatures

300 seconds

Behavioral task

behavioral2

Sample

Resource

win10v2004-20231215-en

windows10-2004-x64

8 signatures

300 seconds

General

Target

http://attachments.office.net/owa/[email protected]/service.svc/s/GetAttachmentThumbnail?id=AAMkAGVhMDk1MjgxLTJiYzktNGIwOS1hMWY0LTA0NGZhMWExN2M5MwBGAAAAAAAKuxJTCRsdTJa5IM%2FXuN0rBwC%2BqAPgh0bZTYjOuRcxAfFoAAAD2CCSAAC%2BqAPgh0bZTYjOuRcxAfFoAAAzCp%2BaAAABEgAQANA3ST6HPOdMjwX5aPIjpHQ%3D&thumbnailType=2&token=eyJhbGciOiJSUzI1NiIsImtpZCI6IkU1RDJGMEY4REE5M0I2NzA5QzQzQTlFOEE2MTQzQzAzRDYyRjlBODAiLCJ0eXAiOiJKV1QiLCJ4NXQiOiI1ZEx3LU5xVHRuQ2NRNm5vcGhROEE5WXZtb0EifQ.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.G7yYS1yHrus2PpWOTVj3P2nG6SOizBDJDg6PKmi9A7N4IurF6vEBMOuoGKfmoCy2nurbvwM3EWPrDZntBsuR37VI_Tkgpzg4YMWhaPPYh2HBHnavEZtmUEoMomJg29g15_QhbCHSjZ3gVNLD0s1QLG7wvwqATE8m6DcJmHbRJAtu8GDebkfHyFmOnEcQmQVQFYQMRec26fmGhYUNTNxuyISNDAO270g93CausraunMVe0JaKeV0hFcYRtTcukR5Lo2XK7g7R9Y5TiKudEZaHi5SXMC9J9C8J0gHrAuAyYRz08RQWwN0EojO7KbkOqrrdtIZcSUddPKEMhsnFT9vpWg&X-OWA-CANARY=Uep2pOxYQE-Uhv3i59Nu9mD9xN-hHtwYriCRI-RUQAn3FKfz4l-54B0ziEQeDtYTaDUvJawRB3Y.&owa=outlook.office.com&scriptVer=20240119003.09&clientId=B4144075E56B49B8B17745F02C1B9A1F&animation=true

Score

8^/10

phishing

Malware Config

Signatures

A potential corporate email address has been identified in the URL: [email protected]
phishing

Sharing

General

Malware Config

Signatures

Files