General

  • Target

    https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=apcpgpo%40saic.com&senderemailaddress=Antonia.Fenoglio%40claconnect.com&senderorganization=AwGJAAAAAoUAAAADAQAAAKn%2bFUkXaMNDhq6CRE7G7fJPVT1jbGlmdG9ubGFyc29uYWxsZW4ub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1OQU1QUjE2QTAwMixEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NBSBE3KrEJU%2bxJAVEmrS6O0NOPUNvbmZpZ3VyYXRpb24sQ049Y2xpZnRvbmxhcnNvbmFsbGVuLm9ubWljcm9zb2Z0LmNvbSxDTj1Db25maWd1cmF0aW9uVW5pdHMsREM9TkFNUFIxNkEwMDIsREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTQE%3d&messageid=%3cMW3PR16MB3932179E60E8904143CBC3E0F64F2%40MW3PR16MB3932.namprd16.prod.outlook.com%3e&cfmRecipient=SystemMailbox%7b2C41C89D-35A4-465B-B69B-6F1FC54D8B03%7d%40cliftonlarsonallen.onmicrosoft.com&consumerEncryption=false&senderorgid=4aaa468e-93ba-4ee3-ab9f-6a247aa3ade0&urldecoded=1&e4e_sdata=NEq3XxDKKsk8pSrIjobNXI3PGC0uZX63TJLoawkhsqYr9XxihI1Hbj13iIbTLY1Dm7SSNZAQaTmX4NbyokevjGGcdV3PEICwFSbfK571jRWAT8P%2f%2b7Nj9egIaIP2Sk3Rm86vrLzK6hgUNRPKiBCk0Xl2gcDN2ypNCIjTbBMK2PIjbsbG0G9gtXPY5ztuUVleofbQ%2fl3LpJkaQDu7Bh7az2%2b%2fOTNi4JYNiajIj%2bYfnnyfY%2f%2fv%2feozcU7GspKW1c0eu6Dy75mLC7WaOCYAFZ7ssEGQ9FDWJjDv%2bjBv4EH%2f0S7usNWScjsbpfvx65TQtk6nV%2bKDia4GC07ZSzbVQYur0Q%3d%3d

Score
8/10

Malware Config

Signatures

  • A potential corporate email address has been identified in the URL: <MW3PR16MB3932179E60E8904143CBC3E0F64F2@MW3PR16MB3932.namprd16.prod.outlook.com>

Files