URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=3DJason.M.Tarrence%40saic.com&senderemailaddress=3Dashwini.n%40lowes.com&senderorganization=3DAwF8AAAAAngAAAADAQAAAOjgKcafjMpJhjYJbsm8wQlPVT1sb3dlcy5vbm1pY3Jvc29mdC5jb20sT1U9TWljcm9zb2Z0IEV4Y2hhbmdlIEhvc3RlZCBPcmdhbml6YXRpb25zLERDPU5BTVBSMTJBMDAyLERDPVBST0QsREM9T1VUTE9PSyxEQz1DT01orFedD5xZRb7%2fHdYCUMLoQ049Q29uZmlndXJhdGlvbixDTj1sb3dlcy5vbm1pY3Jvc29mdC5jb20sQ049Q29uZmlndXJhdGlvblVuaXRzLERDPU5BTVBSMTJBMDAyLERDPVBST0QsREM9T1VUTE9PSyxEQz1DT00B&messageid=3D%3cCH3PR12MB928254BAA68CF10C53201A32F47A2%40CH3PR12MB9282.namprd12.prod.outlook.com%3e&cfmRecipient=3DSystemMailbox%7bd362a789-31e4-48f6-92c1-11fcae9ff9c1%7d%40lowes.onmicrosoft.com&consumerEncryption=3Dfalse&senderorgid=3Dbcfa3e87-841e-48c7-983b-584159dd1a69&urldecoded=3D1&e4e_sdata=3DHJ27u1OS42%2bCWlT7T4XgMgQmmnASt7%2bZRU4fuyj6S12BI2GXMUPeBe1vhETeTwgQsBEjaADlEBxPkcOm7nBO85YW7shxFecMUJbvWWt50BofDxd9xT1UldpxQIoB%2bxaDFB204m%2ffku4BVZBM8aMCz7qUZPkbHiu0K07WMRpdXy3KdBedsPv6QasvoC%2fIzxf2E8Bkbz97O1Qc2bp3IxYZLBuEqgpyhTDealJEl5SeyblVDbNqHOUDKKQ9SyLPsfkgcGXsB3JI2YOBPIQpv8bcPOQ8gYaH9WP3%2bt%2bHfcNeT3dcpQPLVbLIKknZhmkdkGNikRQ9FkBOy%2fIs242HRTuXFg%3d%3d
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=3DJason.M.Tarrence%40saic.com&senderemailaddress=3Dashwini.n%40lowes.com&senderorganization=3DAwF8AAAAAngAAAADAQAAAOjgKcafjMpJhjYJbsm8wQlPVT1sb3dlcy5vbm1pY3Jvc29mdC5jb20sT1U9TWljcm9zb2Z0IEV4Y2hhbmdlIEhvc3RlZCBPcmdhbml6YXRpb25zLERDPU5BTVBSMTJBMDAyLERDPVBST0QsREM9T1VUTE9PSyxEQz1DT01orFedD5xZRb7%2fHdYCUMLoQ049Q29uZmlndXJhdGlvbixDTj1sb3dlcy5vbm1pY3Jvc29mdC5jb20sQ049Q29uZmlndXJhdGlvblVuaXRzLERDPU5BTVBSMTJBMDAyLERDPVBST0QsREM9T1VUTE9PSyxEQz1DT00B&messageid=3D%3cCH3PR12MB928254BAA68CF10C53201A32F47A2%40CH3PR12MB9282.namprd12.prod.outlook.com%3e&cfmRecipient=3DSystemMailbox%7bd362a789-31e4-48f6-92c1-11fcae9ff9c1%7d%40lowes.onmicrosoft.com&consumerEncryption=3Dfalse&senderorgid=3Dbcfa3e87-841e-48c7-983b-584159dd1a69&urldecoded=3D1&e4e_sdata=3DHJ27u1OS42%2bCWlT7T4XgMgQmmnASt7%2bZRU4fuyj6S12BI2GXMUPeBe1vhETeTwgQsBEjaADlEBxPkcOm7nBO85YW7shxFecMUJbvWWt50BofDxd9xT1UldpxQIoB%2bxaDFB204m%2ffku4BVZBM8aMCz7qUZPkbHiu0K07WMRpdXy3KdBedsPv6QasvoC%2fIzxf2E8Bkbz97O1Qc2bp3IxYZLBuEqgpyhTDealJEl5SeyblVDbNqHOUDKKQ9SyLPsfkgcGXsB3JI2YOBPIQpv8bcPOQ8gYaH9WP3%2bt%2bHfcNeT3dcpQPLVbLIKknZhmkdkGNikRQ9FkBOy%2fIs242HRTuXFg%3d%3d
Resource
win10v2004-20231215-en
General
-
Target
https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=3DJason.M.Tarrence%40saic.com&senderemailaddress=3Dashwini.n%40lowes.com&senderorganization=3DAwF8AAAAAngAAAADAQAAAOjgKcafjMpJhjYJbsm8wQlPVT1sb3dlcy5vbm1pY3Jvc29mdC5jb20sT1U9TWljcm9zb2Z0IEV4Y2hhbmdlIEhvc3RlZCBPcmdhbml6YXRpb25zLERDPU5BTVBSMTJBMDAyLERDPVBST0QsREM9T1VUTE9PSyxEQz1DT01orFedD5xZRb7%2fHdYCUMLoQ049Q29uZmlndXJhdGlvbixDTj1sb3dlcy5vbm1pY3Jvc29mdC5jb20sQ049Q29uZmlndXJhdGlvblVuaXRzLERDPU5BTVBSMTJBMDAyLERDPVBST0QsREM9T1VUTE9PSyxEQz1DT00B&messageid=3D%3cCH3PR12MB928254BAA68CF10C53201A32F47A2%40CH3PR12MB9282.namprd12.prod.outlook.com%3e&cfmRecipient=3DSystemMailbox%7bd362a789-31e4-48f6-92c1-11fcae9ff9c1%7d%40lowes.onmicrosoft.com&consumerEncryption=3Dfalse&senderorgid=3Dbcfa3e87-841e-48c7-983b-584159dd1a69&urldecoded=3D1&e4e_sdata=3DHJ27u1OS42%2bCWlT7T4XgMgQmmnASt7%2bZRU4fuyj6S12BI2GXMUPeBe1vhETeTwgQsBEjaADlEBxPkcOm7nBO85YW7shxFecMUJbvWWt50BofDxd9xT1UldpxQIoB%2bxaDFB204m%2ffku4BVZBM8aMCz7qUZPkbHiu0K07WMRpdXy3KdBedsPv6QasvoC%2fIzxf2E8Bkbz97O1Qc2bp3IxYZLBuEqgpyhTDealJEl5SeyblVDbNqHOUDKKQ9SyLPsfkgcGXsB3JI2YOBPIQpv8bcPOQ8gYaH9WP3%2bt%2bHfcNeT3dcpQPLVbLIKknZhmkdkGNikRQ9FkBOy%2fIs242HRTuXFg%3d%3d
Malware Config
Signatures
-
A potential corporate email address has been identified in the URL: [email protected]