General
-
Target
https://outlook.office.com/findtime/vote?getrequesturl=https%3a%2f%2foutlook.office.com%2fows%2fPUID%3a10032002AB98452E%40c82b56a3-b5b4-4e6f-8c50-ef3f5f8f6fcf%2fbeta%2fOutlookMeetingPolls%2fGetPollForVotingPage%3fid%3dRgAAAAAjpiKCFtwnTKRxqpqea1-GBwC4R8_zserSS49AmCoqsGjxAACu5dkkAAC4R8_zserSS49AmCoqsGjxAACu5wpRAAAA0%26authtoken%3deyJhbGciOiJSUzI1NiIsImtpZCI6IloyeTkxSDI2NlFTcTVySGR2K1ljUFRxUVVzTT0iLCJ0eXAiOiJKV1QiLCJ4NXQiOiJNTkVPUHc1MEpXTk11NFBjT0ZFaTVYVW9ralUifQ.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.tG1jaB0GzV58WrHNXNhDK8VKAeUAVX6F9yBTr9nZErlCZU5Tb3Q57HkxsspGXuzkX9v_wpTIxElQMGYSUvWPrcigMaLMT8e_I68QUaKrP5vMoIjut5kDb0E7JeC9GFWXs21U9tlxDhiwyniDtI8_KmRRn5hS8B-aJMjwx5zfNtqqqROaSekD29NfzgAN4SjXtTP5npOBA-39VXyLEI7SwFc1UJM4Adcmv45-m8kf8AodkqKZhfRpy-2LGtEhocUdw8enuWTM4TXHYhgpy4qT18kYRHUGej2l3S-CCy8LKS5clNFyfSWgOv9JGjzrPZIay0cuMHMntju4lqM4ky0jrw&anonymous
Malware Config
Signatures
-
A potential corporate email address has been identified in the URL: httpsoutlook.office.comowsPUID10032002AB98452E@c82b56a3b5b44e6f8c50ef3f5f8f6fcfbetaOutlookMeetingPollsGetPollForVotingPageidRgAAAAAjpiKCFtwnTKRxqpqea1GBwC4R8zserSS49AmCoqsGjxAACu5dkkAAC4R8zserSS49AmCoqsGjxAACu5wpRAAAA0authtokeneyJhbGciOiJSUzI1NiIsImtpZCI6IloyeTkxSDI2NlFTcTVySGR2K1ljUFRxUVVzTT0iLCJ0eXAiOiJKV1QiLCJ4NXQiOiJNTkVPUHc1MEpXTk11NFBjT0ZFaTVYVW9ralUifQ.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.tG1jaB0GzV58WrHNXNhDK8VKAeUAVX6F9yBTr9nZErlCZU5Tb3Q57HkxsspGXuzkX9vwpTIxElQMGYSUvWPrcigMaLMT8eI68QUaKrP5vMoIjut5kDb0E7JeC9GFWXs21U9tlxDhiwyniDtI8KmRRn5hS8BaJMjwx5zfNtqqqROaSekD29NfzgAN4SjXtTP5npOBA39VXyLEI7SwFc1UJM4Adcmv45m8kf8AodkqKZhfRpy2LGtEhocUdw8enuWTM4TXHYhgpy4qT18kYRHUGej2l3SCCy8LKS5clNFyfSWgOv9JGjzrPZIay0cuMHMntju4lqM4ky0jrw