General
-
Target
https://attachments.office.net/owa/Harrist1%40telkom.co.za/service.svc/s/GetAttachmentThumbnail?id=AAMkAGJkMzVkMDY3LWI3ZjYtNGU0YS1iOWYwLTEyNjY4YTBhNjNkZABGAAAAAABhtvf2Wm3OS40JLklE0Y6dBwC9UcWJO%2BH0R7D2WVGmxc3uAAAAAAEJAAC9UcWJO%2BH0R7D2WVGmxc3uAADGDzriAAABEgAQAKjBz8MyuSZOpTZ4rWlJXCQ%3D&thumbnailType=2&token=eyJhbGciOiJSUzI1NiIsImtpZCI6IkU1RDJGMEY4REE5M0I2NzA5QzQzQTlFOEE2MTQzQzAzRDYyRjlBODAiLCJ0eXAiOiJKV1QiLCJ4NXQiOiI1ZEx3LU5xVHRuQ2NRNm5vcGhROEE5WXZtb0EifQ.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.n42s_wjNzysYpS9XnZIP1HIAhIfpBEYcOb_Xs7Irg7RVZbCxjFH0dFn7gCQGNZOqfBdcHUwif2Y10jRT9vtKPxtHKobuENQQ_xKWT2kS9MLo-K_vJ4n05gNQXr7b9zZ9n4TiitrNqPW8lobssL8WgC4eVlavBPQJnfd1uwi6uN5vKbd0uCvJDyj4_5bdz_rC9pqi8ZHeiCB4Yzi9LhH4XcmvfXagOeEOp7fNIOgG4PU0DX77jbKqpjKaQWDTZnts--bIiJafM2r_tK-bn3ruKniRCbGU9B2vDDYbW6wRv-elvkWL7Qt2ueG4rxiTn3G2gfetIHL6K_JrJoGlWArehw&X-OWA-CANARY=bdvoVwmhqtoAAAAAAAAAAIAaVZY7etwYudrwUyXNMNSHeVbevtjcnH_5NfXDi5NVtfDC1-fMZq4.&owa=outlook.office.com&scriptVer=20240510004.30&clientId=5DCAA95A75D24437ADF8B640D885C61D&animation=true
Malware Config
Signatures
-
A potential corporate email address has been identified in the URL: [email protected]