URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://attachments.office.net/owa/[email protected]/service.svc/s/GetFileAttachment?id=AAkALgAAAAAAHYQDEapmEc2byACqAC%2fEWg0A%2bFXsynjEFUiYlyC29Qu39QAAFiBBmQAAARIAEADCfKysEexXTbBRz7r2Lfup&token=eyJhbGciOiJSUzI1NiIsImtpZCI6IkU1RDJGMEY4REE5M0I2NzA5QzQzQTlFOEE2MTQzQzAzRDYyRjlBODAiLCJ0eXAiOiJKV1QiLCJ4NXQiOiI1ZEx3LU5xVHRuQ2NRNm5vcGhROEE5WXZtb0EifQ.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.nDzd63BZLoa5ZTxCQFBhZHUuk6ImDHUoR3IqI6WE48SOXHiCZ90FChrvmsy9XczukdpNEglTTJtbRIPY4BLYJ8gZFaqgqLSjDB27BkOfWVmrXnVMJpz2-WwzuZ2BYtsiZI99a_BDQLsXhug-Jdq-R17uSZUIcxzFggM94E6Wlc6wD7g8hg-is0KiadtgzZ2ctW0IUZybmSQ-TldWoWmmgQlNdObGy-r7nZgex_C_VsfNnnZLmIJJAgp2ZYrSkv_y1bOeN0QQcyExLKS7CTWSRcp-IpMR3FhGz83HLpY2TDO4tcTrxbOMaAnEdD7ewLSkoOpGgRKnlW1fgRmll5psTw
Resource
win10v2004-20240508-en
General
-
Target
https://attachments.office.net/owa/[email protected]/service.svc/s/GetFileAttachment?id=AAkALgAAAAAAHYQDEapmEc2byACqAC%2fEWg0A%2bFXsynjEFUiYlyC29Qu39QAAFiBBmQAAARIAEADCfKysEexXTbBRz7r2Lfup&token=eyJhbGciOiJSUzI1NiIsImtpZCI6IkU1RDJGMEY4REE5M0I2NzA5QzQzQTlFOEE2MTQzQzAzRDYyRjlBODAiLCJ0eXAiOiJKV1QiLCJ4NXQiOiI1ZEx3LU5xVHRuQ2NRNm5vcGhROEE5WXZtb0EifQ.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.nDzd63BZLoa5ZTxCQFBhZHUuk6ImDHUoR3IqI6WE48SOXHiCZ90FChrvmsy9XczukdpNEglTTJtbRIPY4BLYJ8gZFaqgqLSjDB27BkOfWVmrXnVMJpz2-WwzuZ2BYtsiZI99a_BDQLsXhug-Jdq-R17uSZUIcxzFggM94E6Wlc6wD7g8hg-is0KiadtgzZ2ctW0IUZybmSQ-TldWoWmmgQlNdObGy-r7nZgex_C_VsfNnnZLmIJJAgp2ZYrSkv_y1bOeN0QQcyExLKS7CTWSRcp-IpMR3FhGz83HLpY2TDO4tcTrxbOMaAnEdD7ewLSkoOpGgRKnlW1fgRmll5psTw
Malware Config
Signatures
-
A potential corporate email address has been identified in the URL: [email protected]