General
-
Target
https://attachments.office.net/owa/jamie.chase%40thinkit.co.nz/service.svc/s/GetAttachmentThumbnail?id=AAMkADBlOGExNzIwLTU1MTktNGNiNS04OTljLTNmODI2OTQ5M2U0NwBGAAAAAAA%2FQICjKwV%2FQLeC0XD7a3TsBwApJqZb%2BIFNS5lkTdmkJKg0AAAAAAEMAAApJqZb%2BIFNS5lkTdmkJKg0AAEWt5qtAAABEgAQAOsp011PuDdOtq2PU2om81c%3D&thumbnailType=2&token=eyJhbGciOiJSUzI1NiIsImtpZCI6IkU1RDJGMEY4REE5M0I2NzA5QzQzQTlFOEE2MTQzQzAzRDYyRjlBODAiLCJ0eXAiOiJKV1QiLCJ4NXQiOiI1ZEx3LU5xVHRuQ2NRNm5vcGhROEE5WXZtb0EifQ.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.OqsKHNgpYViecwacVm6lj7ETIamAQZTX3Kre8b3-DmIB5ISEdr0eMyE2YVyqeU9qdL7nviPhJwUiBjhInwgsOSGj_D66VuGohC6DXwVo_zdSbIYkAxrn8gI0Q2Ib480Oz726ML-RNpqd3Phj9vyhoKWEmLTXUtb6UEI3gn6sbwtWED5cejFlvEyDTWpRviN6GE2TmuMiIE_Zt2QxawBLNH5MR48SlzC6jo8jkJd1nFT1yzL3yKvizVq76M4WKE3XwSsAN4h9v_1wvMw-FBN7kQGAmrKe87JEcwb24bGN9NrZ2J4CkGYVLWeYEt_pPyVrX6RMYbEmkrhFDnrKDqsMYw&X-OWA-CANARY=X-OWA-CANARY_cookie_is_null_or_empty&owa=outlook.office.com&scriptVer=20240223002.10&clientId=EFD9A7C82E2D4D2D997F7AEC8CDE0F71&animation=true&persistenceId=6c8819ec-fbe0-4c32-8ff7-9e5ba9db6e42
Malware Config
Signatures
-
A potential corporate email address has been identified in the URL: [email protected]