General

  • Target

    https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=FRED.W.SHAFER%40saic.com&senderemailaddress=officemanager%40uccgeorgia.com&senderorganization=AwF8AAAAAngAAAADAQAAANR2ff1pipJAvrGjmNKfM2xPVT11Y2NnYS5vbm1pY3Jvc29mdC5jb20sT1U9TWljcm9zb2Z0IEV4Y2hhbmdlIEhvc3RlZCBPcmdhbml6YXRpb25zLERDPU5BTVBSMDhBMDA2LERDPVBST0QsREM9T1VUTE9PSyxEQz1DT03x77bvK3iaSKxzHnHdHNtXQ049Q29uZmlndXJhdGlvbixDTj11Y2NnYS5vbm1pY3Jvc29mdC5jb20sQ049Q29uZmlndXJhdGlvblVuaXRzLERDPU5BTVBSMDhBMDA2LERDPVBST0QsREM9T1VUTE9PSyxEQz1DT00B&messageid=%3cBYAPR08MB4293B60E457A0265701669B3C3572%40BYAPR08MB4293.namprd08.prod.outlook.com%3e&cfmRecipient=SystemMailbox%7bD0E409A0-AF9B-4720-92FE-AAC869B0D201%7d%40uccga.onmicrosoft.com&consumerEncryption=false&senderorgid=062a3405-c0d8-443c-b1c2-12025a2b6c44&urldecoded=1&e4e_sdata=d9xrdBquYI%2b0%2bngRRcRJCcQjfLnJJBhbbXITmg%2bkY0JVjNinA8ATDXg7VkGtNOb%2fH6%2bL8J27Mm0la66nSlo9%2foTOyHzzarPCh%2bF3PxzaAWQVwU7bbNu3csLp4pFNsAkRdPN3WdE8aCrekfTvNMeNJ0mZXChRDyoyBbXqtgTo9UJfoGFmfQEHpq7xfSNXTCGS1x3lO7ZLHA3JBXHp67WsTg6dvc8mDuFMjw8pHQp2rFfdMj7B76kAadT%2ft%2bf8h6US%2fNYmzpGm%2fMQO34vnkFN%2b0WIcHaXl%2bX5jYESBe6lOpyxOlA%2b7%2fe%2b1w8LFS8neiM%2fbEtFCm55jq2Xsp8NZ%2bL5T7Q%3d%3d

Score
8/10

Malware Config

Signatures

  • A potential corporate email address has been identified in the URL: SystemMailbox{D0E409A0-AF9B-4720-92FE-AAC869B0D201}@uccga.onmicrosoft.com

Files