URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://attachments.office.net/owa/[email protected]/service.svc/s/GetFileAttachment?id=AAkALgAAAAAAHYQDEapmEc2byACqAC%2fEWg0AxPs3MAxWl0iXP9MnLfhqGwACAKAafAAAARIAEACM%2b7yAD1PTQ6dBS7EgT6v0&token=eyJhbGciOiJSUzI1NiIsImtpZCI6IkU1RDJGMEY4REE5M0I2NzA5QzQzQTlFOEE2MTQzQzAzRDYyRjlBODAiLCJ0eXAiOiJKV1QiLCJ4NXQiOiI1ZEx3LU5xVHRuQ2NRNm5vcGhROEE5WXZtb0EifQ.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.II9xiMxs5LFosLAbmlOVErXu8LMdQ7ERvX71DGNtzY9PF8yx16EZ62gnJ55aWN-UzgL4Y9jC9leJD04w1I0zGPSyKWYnigWrIV502huAGole7gmp7F7mYa7LrIAVbU6tjng23l1YaJ8mAMBQpegjR3Ol7t4Qw1nG2GgeGt8SlYLpnajJaksvS80Ltlzx3ysovtGM-jSxcKmFEE00nsjCumx8xfy8yYqP4Bxk9t4Hoo_E8MWu88QqV7xg_00ipazS5hXyyIl8cE6h8opyID2clZKU10bEoMD0rd61tW7M3vRNCaMpja4uA3yNMo59bN6InruBTkXiciYp79wkiCpOHw&scenario=LegacyRedirect
Resource
win10v2004-20240226-en
General
-
Target
https://attachments.office.net/owa/[email protected]/service.svc/s/GetFileAttachment?id=AAkALgAAAAAAHYQDEapmEc2byACqAC%2fEWg0AxPs3MAxWl0iXP9MnLfhqGwACAKAafAAAARIAEACM%2b7yAD1PTQ6dBS7EgT6v0&token=eyJhbGciOiJSUzI1NiIsImtpZCI6IkU1RDJGMEY4REE5M0I2NzA5QzQzQTlFOEE2MTQzQzAzRDYyRjlBODAiLCJ0eXAiOiJKV1QiLCJ4NXQiOiI1ZEx3LU5xVHRuQ2NRNm5vcGhROEE5WXZtb0EifQ.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.II9xiMxs5LFosLAbmlOVErXu8LMdQ7ERvX71DGNtzY9PF8yx16EZ62gnJ55aWN-UzgL4Y9jC9leJD04w1I0zGPSyKWYnigWrIV502huAGole7gmp7F7mYa7LrIAVbU6tjng23l1YaJ8mAMBQpegjR3Ol7t4Qw1nG2GgeGt8SlYLpnajJaksvS80Ltlzx3ysovtGM-jSxcKmFEE00nsjCumx8xfy8yYqP4Bxk9t4Hoo_E8MWu88QqV7xg_00ipazS5hXyyIl8cE6h8opyID2clZKU10bEoMD0rd61tW7M3vRNCaMpja4uA3yNMo59bN6InruBTkXiciYp79wkiCpOHw&scenario=LegacyRedirect
Malware Config
Signatures
-
A potential corporate email address has been identified in the URL: [email protected]