General

  • Target
    https://rixstine-my.sharepoint.com/:b:/p/cs2/EdL5O6vQST5HuPRCPf2UAhQBqbZ8FL8tQ8RelUpBqrZ40g?e=4%3aB3G4GE&at=9&xsdata=MDV8MDJ8eWFtZWkud2FuZ0B1c2Npcy5kaHMuZ292fDI2YmI1ZjAxMjJmMjRlZGFmYTg4MDhkYzk1NWMxMzIxfDVlNDFlZTc0MGQyZDRhNzI4OTc1OTk4Y2U4MzIwNWVifDF8MHw2Mzg1NDk0Njk5MjAwNjgyNTZ8VW5rbm93bnxUV0ZwYkdac2IzZDhleUpXSWpvaU1DNHdMakF3TURBaUxDSlFJam9pVjJsdU16SWlMQ0pCVGlJNklrMWhhV3dpTENKWFZDSTZNbjA9fDQwMDAwfHx8&sdata=VmdiSFpFQVAxcWVBcERCdjI1VWk4TmM5Mm1IQlk1ZWxJNVRPVnJKajBHMD0%3d&clickparams=eyAiWC1BcHBOYW1lIiA6ICJNaWNyb3NvZnQgT3V0bG9vayIsICJYLUFwcFZlcnNpb24iIDogIjE2LjAuMTc1MzEuMjAxOTAiLCAiT1MiIDogIldpbmRvd3MiIH0%3D&CT=1719350279438&OR=Outlook-Body&CID=EC3136FB-EEA5-45EE-8AE0-C2080921D93B
  • Sample240628-vmkl1azfkr
Score
8/10

Malware Config

Signatures

  • A potential corporate email address has been identified in the URL: 05|02|[email protected]|26bb5f0122f24edafa8808dc955c1321|5e41ee740d2d4a728975998ce83205eb|1|0|638549469920068256|Unknown|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0=|40000|||

File Explorer