URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=security-alerts%40dir.texas.gov&senderemailaddress=AKazemi%40sos.texas.gov&senderorganization=AwF8AAAAAngAAAADAQAAAG%2bCcW%2bVvgNBsBskKcO2ibdPVT10eHNvcy5vbm1pY3Jvc29mdC5jb20sT1U9TWljcm9zb2Z0IEV4Y2hhbmdlIEhvc3RlZCBPcmdhbml6YXRpb25zLERDPU5BTVBSMDlBMDAxLERDPXByb2QsREM9b3V0bG9vayxEQz1jb220Up0I%2fCzLS6XXlAO6%2f%2fDvQ049Q29uZmlndXJhdGlvbixDTj10eHNvcy5vbm1pY3Jvc29mdC5jb20sQ049Q29uZmlndXJhdGlvblVuaXRzLERDPU5BTVBSMDlBMDAxLERDPXByb2QsREM9b3V0bG9vayxEQz1jb20B&messageid=%3cSA0PR09MB610589F88F791FC54542459CFAC12%40SA0PR09MB6105.namprd09.prod.outlook.com%3e&cfmRecipient=SystemMailbox%7b6C0A1EFA-EC06-4AF8-8120-E8DF728D24A6%7d%40txsos.onmicrosoft.com&consumerEncryption=false&senderorgid=760188c0-f634-43a0-96df-ec1b8eca6719&customizationTemplate=TXSOS_OMEConfig1&urldecoded=1&e4e_sdata=Jz0NfFqFYUZaCDY0WqGijmqN7eaZM%2fQFn%2bbaPxRSd5S7GUDNqBcUX4aCONHciTbqQYfFC2cUGmxS%2bfo%2bzk%2bcC2BgHbSuL02zU6rnK2vgkEGuvs4IE5FR4xfDq9bdeqWNYwj8NYzt9ltdDZOjVqCrQESFu9ZRnuBt%2bS%2bKlqGPreZVdexcAnBc2%2bFgqS1arOeCNe8uOHsr8FEpUgNAq1lC6TfJp6RyhGIdiN8wuo2vRdc%2bU0rCetuj%2bOT46jFGHcIB%2btfda2HnQdL8FAzJ8x%2fFx6uuRNM8Qbq1Tw3XY1hOLbBKDPxKYp%2fTqbNBa1Ow3%2fak6Scg%2f7CMCBT7Wb3vPaEV0g%3d%3d
Resource
win10v2004-20240508-en
General
-
Target
https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=security-alerts%40dir.texas.gov&senderemailaddress=AKazemi%40sos.texas.gov&senderorganization=AwF8AAAAAngAAAADAQAAAG%2bCcW%2bVvgNBsBskKcO2ibdPVT10eHNvcy5vbm1pY3Jvc29mdC5jb20sT1U9TWljcm9zb2Z0IEV4Y2hhbmdlIEhvc3RlZCBPcmdhbml6YXRpb25zLERDPU5BTVBSMDlBMDAxLERDPXByb2QsREM9b3V0bG9vayxEQz1jb220Up0I%2fCzLS6XXlAO6%2f%2fDvQ049Q29uZmlndXJhdGlvbixDTj10eHNvcy5vbm1pY3Jvc29mdC5jb20sQ049Q29uZmlndXJhdGlvblVuaXRzLERDPU5BTVBSMDlBMDAxLERDPXByb2QsREM9b3V0bG9vayxEQz1jb20B&messageid=%3cSA0PR09MB610589F88F791FC54542459CFAC12%40SA0PR09MB6105.namprd09.prod.outlook.com%3e&cfmRecipient=SystemMailbox%7b6C0A1EFA-EC06-4AF8-8120-E8DF728D24A6%7d%40txsos.onmicrosoft.com&consumerEncryption=false&senderorgid=760188c0-f634-43a0-96df-ec1b8eca6719&customizationTemplate=TXSOS_OMEConfig1&urldecoded=1&e4e_sdata=Jz0NfFqFYUZaCDY0WqGijmqN7eaZM%2fQFn%2bbaPxRSd5S7GUDNqBcUX4aCONHciTbqQYfFC2cUGmxS%2bfo%2bzk%2bcC2BgHbSuL02zU6rnK2vgkEGuvs4IE5FR4xfDq9bdeqWNYwj8NYzt9ltdDZOjVqCrQESFu9ZRnuBt%2bS%2bKlqGPreZVdexcAnBc2%2bFgqS1arOeCNe8uOHsr8FEpUgNAq1lC6TfJp6RyhGIdiN8wuo2vRdc%2bU0rCetuj%2bOT46jFGHcIB%2btfda2HnQdL8FAzJ8x%2fFx6uuRNM8Qbq1Tw3XY1hOLbBKDPxKYp%2fTqbNBa1Ow3%2fak6Scg%2f7CMCBT7Wb3vPaEV0g%3d%3d
Malware Config
Signatures
-
A potential corporate email address has been identified in the URL: [email protected]