hxxps://attachments[.]office[.]net/owa/ben@met[.]com/service[.]svc/s/GetFileAttachment?id=AAkALgAAAAAAHYQDEapmEc2byACqAC%2fEWg0AJ5yoG%2baTcECbZKRlQhfuGAAAlVq56wAAARIAEABMz7fjPkLsRJ4Fhl962Fnz&token=eyJhbGciOiJSUzI1NiIsImtpZCI6IkU1RDJGMEY4REE5M0I2NzA5QzQzQTlFOEE2MTQzQzAzRDYyRjlBODAiLCJ0eXAiOiJKV1QiLCJ4NXQiOiI1ZEx3LU5xVHRuQ2NRNm5vcGhROEE5WXZtb0EifQ[.]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[.]Xxr6SHb2K9KVZMp43Bl9Y4gBMx_H29IQmlBETkRLUNcuoh-I796wmSXGaMxAJIHZGx4ssA0iiUCuVM2kXIDi2QtU92v3XaSLIJCIeTwf7Ety7yyY0scCvJuUAo2iocDqillWUq4n-dsqLTNFVjNUlHjETzHD12nH3L7CoGVgO2pKSJIprJO_DFpDSCZmUBN3XPYejI0NoQUqtgX2CFomozwOKyxgk1qS7vQbjwjBgk06J6adFa43dIl9jK9rFbW1FBc4qP3cP8Pk0VF41SUn8OK8xuMl1Fsskwo5ri_xMO3s8VdZxgCeYdTSt11cUAlLbOJuQOeCuw31XMnZ0BRnQQ&scenario=LegacyRedirect

Sharing

Copy URL

Twitter E-mail

General

Target

https://attachments.office.net/owa/[email protected]/service.svc/s/GetFileAttachment?id=AAkALgAAAAAAHYQDEapmEc2byACqAC%2fEWg0AJ5yoG%2baTcECbZKRlQhfuGAAAlVq56wAAARIAEABMz7fjPkLsRJ4Fhl962Fnz&token=eyJhbGciOiJSUzI1NiIsImtpZCI6IkU1RDJGMEY4REE5M0I2NzA5QzQzQTlFOEE2MTQzQzAzRDYyRjlBODAiLCJ0eXAiOiJKV1QiLCJ4NXQiOiI1ZEx3LU5xVHRuQ2NRNm5vcGhROEE5WXZtb0EifQ.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.Xxr6SHb2K9KVZMp43Bl9Y4gBMx_H29IQmlBETkRLUNcuoh-I796wmSXGaMxAJIHZGx4ssA0iiUCuVM2kXIDi2QtU92v3XaSLIJCIeTwf7Ety7yyY0scCvJuUAo2iocDqillWUq4n-dsqLTNFVjNUlHjETzHD12nH3L7CoGVgO2pKSJIprJO_DFpDSCZmUBN3XPYejI0NoQUqtgX2CFomozwOKyxgk1qS7vQbjwjBgk06J6adFa43dIl9jK9rFbW1FBc4qP3cP8Pk0VF41SUn8OK8xuMl1Fsskwo5ri_xMO3s8VdZxgCeYdTSt11cUAlLbOJuQOeCuw31XMnZ0BRnQQ&scenario=LegacyRedirect
Sample

240612-h7db7stgpd

Score

8^/10

phishing

Malware Config

Targets

- Target
  
  https://attachments.office.net/owa/[email protected]/service.svc/s/GetFileAttachment?id=AAkALgAAAAAAHYQDEapmEc2byACqAC%2fEWg0AJ5yoG%2baTcECbZKRlQhfuGAAAlVq56wAAARIAEABMz7fjPkLsRJ4Fhl962Fnz&token=eyJhbGciOiJSUzI1NiIsImtpZCI6IkU1RDJGMEY4REE5M0I2NzA5QzQzQTlFOEE2MTQzQzAzRDYyRjlBODAiLCJ0eXAiOiJKV1QiLCJ4NXQiOiI1ZEx3LU5xVHRuQ2NRNm5vcGhROEE5WXZtb0EifQ.eyJvcmlnaW4iOiJodHRwczovL291dGxvb2sub2ZmaWNlLmNvbTo0NDQiLCJ1YyI6ImY3MjU1YTIyNDg4MzQwZmViYWNjZDVmYzgzN2U1MjVlIiwidmVyIjoiRXhjaGFuZ2UuQ2FsbGJhY2suVjEiLCJhcHBjdHhzZW5kZXIiOiJPd2FEb3dubG9hZEA3NDMzYmVmMy0zYjFjLTQwOWYtYTZmMS0wNDlkMTI2YjIxZGUiLCJpc3NyaW5nIjoiU0lQIiwiYXBwY3R4Ijoie1wibXNleGNocHJvdFwiOlwib3dhXCIsXCJwdWlkXCI6XCIxMDAzMjAwMzBBM0NEN0Q4XCIsXCJzY29wZVwiOlwiT3dhRG93bmxvYWRcIixcIm9pZFwiOlwiOWVmMTA4ZGYtNDY5NC00YzYyLWEwZWYtNGI3NDgzNGMxZjEyXCIsXCJwcmltYXJ5c2lkXCI6XCJTLTEtNS0yMS00MDA2NzM0MDc5LTM2MDc3NjE5Ni05MjYxODQ5NC0zMjcwODUwMVwifSIsIm5iZiI6MTcxODE3NjgxMiwiZXhwIjoxNzE4MTc3NDEyLCJpc3MiOiIwMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDBANzQzM2JlZjMtM2IxYy00MDlmLWE2ZjEtMDQ5ZDEyNmIyMWRlIiwiYXVkIjoiMDAwMDAwMDItMDAwMC0wZmYxLWNlMDAtMDAwMDAwMDAwMDAwL2F0dGFjaG1lbnRzLm9mZmljZS5uZXRANzQzM2JlZjMtM2IxYy00MDlmLWE2ZjEtMDQ5ZDEyNmIyMWRlIiwiaGFwcCI6Im93YSJ9.Xxr6SHb2K9KVZMp43Bl9Y4gBMx_H29IQmlBETkRLUNcuoh-I796wmSXGaMxAJIHZGx4ssA0iiUCuVM2kXIDi2QtU92v3XaSLIJCIeTwf7Ety7yyY0scCvJuUAo2iocDqillWUq4n-dsqLTNFVjNUlHjETzHD12nH3L7CoGVgO2pKSJIprJO_DFpDSCZmUBN3XPYejI0NoQUqtgX2CFomozwOKyxgk1qS7vQbjwjBgk06J6adFa43dIl9jK9rFbW1FBc4qP3cP8Pk0VF41SUn8OK8xuMl1Fsskwo5ri_xMO3s8VdZxgCeYdTSt11cUAlLbOJuQOeCuw31XMnZ0BRnQQ&scenario=LegacyRedirect
Score

1^/10
behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Matrix ATT&CK v13

Tasks

static1

urlscan1

behavioral1