hxxps://webshell[.]suite[.]office[.]com/iframe/TokenFactoryIframe?origin=hxxps://outlook[.]office365[.]com&shsid=7720b54e-811e-4120-ae65-d26ac16ca6d5&apiver=oneshell&cshver=1[.]20240208[.]12[.]0&upn=rcolwell1@ewu[.]edu

Target

https://webshell.suite.office.com/iframe/TokenFactoryIframe?origin=https://outlook.office365.com&shsid=7720b54e-811e-4120-ae65-d26ac16ca6d5&apiver=oneshell&cshver=1.20240208.12.0&[email protected]
Sample

240423-g11ngseb5v

Score

8^/10

Malware Config

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Discovery

System Information Discovery

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact