General

  • Target

    https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=elisa.martinez%40apollomech.com&senderemailaddress=kristy%40myencorebenefits.com&senderorganization=AwF8AAAAAngAAAADAQAAABUgL%2bSPHvVOgcoq7UNAFmFPVT1wY2ZveS5vbm1pY3Jvc29mdC5jb20sT1U9TWljcm9zb2Z0IEV4Y2hhbmdlIEhvc3RlZCBPcmdhbml6YXRpb25zLERDPU5BTVBSMjJBMDA3LERDPVBST0QsREM9T1VUTE9PSyxEQz1DT028wsvTBXGsSIDSXEkdNAk%2fQ049Q29uZmlndXJhdGlvbixDTj1wY2ZveS5vbm1pY3Jvc29mdC5jb20sQ049Q29uZmlndXJhdGlvblVuaXRzLERDPU5BTVBSMjJBMDA3LERDPVBST0QsREM9T1VUTE9PSyxEQz1DT00B&messageid=%3cMW3PR19MB42650C0159BEEFA79EABC374CFDC2%40MW3PR19MB4265.namprd19.prod.outlook.com%3e&cfmRecipient=SystemMailbox%7b0AF09B7F-434F-4B2F-9CBC-57639EDCFD9C%7d%40pcfoy.onmicrosoft.com&consumerEncryption=false&senderorgid=12f20970-019c-494b-b514-531baa01ef87&urldecoded=1&e4e_sdata=ElWuQpJDmNgAyrUS7g5Mhy9qK35LA0ZKrX4mJR2YyLuqCxqKZvKH46bCnLNCK5rDVoQx%2fIQaGzUHQCvwhnZq125nUGsO4Cj6Ez%2bvE71btcRp88jw4GHrBMY4372mzFkdZG%2buhFGh%2fd06Z%2bJTc9Lj2%2ffzVl5UD8MxDhe84dgJ%2frFSVqVWoXT5NSYYdCB3WqWdAhnDDsUk48MXZstke87OooX7DyGeDjQ93XBmhS8wbBV9p0jUD26Qze6yOp%2fd9dxTkbO5lpqUfqgjxeH4KldH3MKPOf1x2xYX7Np9%2bSvWrrA%2fcmvHe0TYbta4SUktL8MMJnLFArj6S%2f9RnoGOICUKog%3d%3d

Score
8/10

Malware Config

Signatures

  • A potential corporate email address has been identified in the URL: SystemMailbox{0AF09B7F-434F-4B2F-9CBC-57639EDCFD9C}@pcfoy.onmicrosoft.com

Files