Static task
static1
General
-
Target
Potential Phish Action required Weve detected that your tenant is using an outdated version of the MDE Sense agent.msg
-
Size
129KB
-
MD5
1e022f5928d7cd938eb6eb7396e73d99
-
SHA1
c221761692a18fcf377b639a08f26767521c4631
-
SHA256
5cbd356a786f98a708eebf35a59f7c10e0b5158c49f45d1ce0c892c96b0a98e5
-
SHA512
371391f46c4158e4e98d5312b22a88968a8f3709cd35b87ee120d0d38f3f3410e0deae4cd91aa922db85881c0497d2cd3c037b6934cbfc3958e365c7f6812a91
-
SSDEEP
1536:puAqYiog0OIQVPcxKoQlbwsbZcDqJSe1Wq11csJIQVPcxKoai:puqLg0OIJxKlrbZcWwe1W+7JIJxoi
Malware Config
Signatures
Files
-
Potential Phish Action required Weve detected that your tenant is using an outdated version of the MDE Sense agent.msg.msg
-
http://.card-table.mobile
-
http://.card-table.no
-
http://.table-default.table-heading-rows-loop.no
-
http://.table-default.table-heading-rows.no
-
http://BL1PR21MB3355.namprd21.prod.outlook.com
-
http://CH1PEPF0000AD81.mail.protection.outlook.com
-
http://CH1PEPF0000AD81.namprd04.prod.outlook.com
-
http://CH2PR07CA0007.namprd07.prod.outlook.com
-
http://CH2PR07CA0007.outlook.office365.com
-
http://DM1PR04CU001.outbound.protection.outlook.com
-
http://MN1PEPF0000F0E3.mail.protection.outlook.com
-
http://MN1PEPF0000F0E3.namprd04.prod.outlook.com
-
http://MN2PR11CA0012.namprd11.prod.outlook.com
-
http://MN2PR11CA0012.outlook.office365.com
-
http://PH7PR13MB5987.namprd13.prod.outlook.com
-
http://SA1PR13MB4894.namprd13.prod.outlook.com
-
http://az.westus.microsoft.com
-
http://mail-centralusazon11023015.outbound.protection.outlook.com
-
http://mail-nam-cu01-by.westus.cloudapp.azure.com
-
http://microsoft.com
-
http://mx.microsoft.com
-
http://protection.outlook.com
-
http://table.menu
-
http://tceq.texas.gov
-
https://images.ecomm.microsoft.com/cdn/mediahandler/azure-emails-templates/production/shared/images/templates/shared/images/logos/microsoft-logo-2x.png
-
https://images.ecomm.microsoft.com/cdn/mediahandler/azure-emails-templates/production/shared/images/templates/shared/microsoft-2x.png
-
https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2FAdminPortal%2Fhome%23%2Fservicehealth%2F%3A%2Falerts%2FDZ790162%3Fshdlinksource%3DIncidentMail%26flyout%3Dfeedback&p=bT01MDg4NzM5Mi01ZjlhLTRmZDYtYTAzMS05MGViNTFjNDkzZTAmdT1hZW8mbD1ob21lXzM%3D
-
https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2FAdminPortal%2Fhome%23%2Fservicehealth%2F%3A%2Falerts%2FDZ790162%3Fshdlinksource%3DIncidentMail%26flyout%3Dfeedback&p=bT01MDg4NzM5Mi01ZjlhLTRmZDYtYTAzMS05MGViNTFjNDkzZTAmdT1hZW8mbD1ob21lXzM%3D
-
https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2FAdminPortal%2Fhome%23%2Fservicehealth%2F%3A%2Falerts%2FDZ790162%3Fshdlinksource%3DIncidentMail&p=bT01MDg4NzM5Mi01ZjlhLTRmZDYtYTAzMS05MGViNTFjNDkzZTAmdT1hZW8mbD1ob21l
-
https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2FAdminPortal%2Fhome%23%2Fservicehealth%2F%3A%2Falerts%2FDZ790162%3Fshdlinksource%3DIncidentMail&p=bT01MDg4NzM5Mi01ZjlhLTRmZDYtYTAzMS05MGViNTFjNDkzZTAmdT1hZW8mbD1ob21lXzI%3D
-
https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2FAdminPortal%2Fhome%23%2Fservicehealth%2F%3A%2Falerts%2FDZ790162%3Fshdlinksource%3DIncidentMail&p=bT01MDg4NzM5Mi01ZjlhLTRmZDYtYTAzMS05MGViNTFjNDkzZTAmdT1hZW8mbD1ob21l
-
https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2FAdminPortal%2Fhome%23%2Fservicehealth%2F%3A%2Falerts%2FDZ790162%3Fshdlinksource%3DIncidentMail&p=bT01MDg4NzM5Mi01ZjlhLTRmZDYtYTAzMS05MGViNTFjNDkzZTAmdT1hZW8mbD1ob21lXzI%3D
-
https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2FAdminPortal%2Fhome%23%2Fservicehealth&p=bT01MDg4NzM5Mi01ZjlhLTRmZDYtYTAzMS05MGViNTFjNDkzZTAmdT1hZW8mbD1ob21lXzQ%3D
-
https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fadmin.microsoft.com%2FAdminPortal%2Fhome%23%2Fservicehealth&p=bT01MDg4NzM5Mi01ZjlhLTRmZDYtYTAzMS05MGViNTFjNDkzZTAmdT1hZW8mbD1ob21lXzQ%3D
-
https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fgo.microsoft.com%2Ffwlink%2F%3FLinkId%3D521839&p=bT01MDg4NzM5Mi01ZjlhLTRmZDYtYTAzMS05MGViNTFjNDkzZTAmdT1hZW8mbD1wcml2YWN5LXN0YXRlbWVudA%3D%3D
-
https://nam.safelink.emails.azure.net/redirect/?destination=https%3A%2F%2Fgo.microsoft.com%2Ffwlink%2F%3FLinkId%3D521839&p=bT01MDg4NzM5Mi01ZjlhLTRmZDYtYTAzMS05MGViNTFjNDkzZTAmdT1hZW8mbD1wcml2YWN5LXN0YXRlbWVudA%3D%3D
-
https://nam.safelink.emails.azure.net/trackingpixel/?p=bT01MDg4NzM5Mi01ZjlhLTRmZDYtYTAzMS05MGViNTFjNDkzZTAmdT1hZW8%3D
- Show all
-
-
Headers.txt.eml