Resubmissions
14/08/2024, 08:06
240814-jzklzswenn 8
General
-
Target
https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=registrator%40svk.se&senderemailaddress=hakan.stoltz%40goteborgenergi.se&senderorganization=AwGHAAAAAoMAAAADAQAAAD4lKWrp4LJHr8bcwMK48DxPVT1nb3RlYm9yZ2VuZXJnaXNlLm9ubWljcm9zb2Z0LmNvbSxPVT1NaWNyb3NvZnQgRXhjaGFuZ2UgSG9zdGVkIE9yZ2FuaXphdGlvbnMsREM9U1dFUDI4MEEwMDIsREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTYvce6i6cCBIvR76e5iSy5BDTj1Db25maWd1cmF0aW9uLENOPWdvdGVib3JnZW5lcmdpc2Uub25taWNyb3NvZnQuY29tLENOPUNvbmZpZ3VyYXRpb25Vbml0cyxEQz1TV0VQMjgwQTAwMixEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NAQ%3d%3d&messageid=%3cGVYP280MB0621840448E7753729642A1E98852%40GVYP280MB0621.SWEP280.PROD.OUTLOOK.COM%3e&cfmRecipient=SystemMailbox%7b0AF09B7F-434F-4B2F-9CBC-57639EDCFD9C%7d%40goteborgenergise.onmicrosoft.com&consumerEncryption=false&senderorgid=a5b22e77-4e89-4f47-912a-29dfbb53702c&urldecoded=1&e4e_sdata=KUN5CtAk73EfjYgcgg6LNiVuypHw4XnG5OBjL1EIZ9AidQnAAQLmwvE4tVS61YtHbNIkayb%2bXj0K%2fNZCJNWBrDBIcWR8Kyu4taHt40Qu0kQV%2bNqdq%2fDsZRl97M6oN9LCqyZIfO2ajTit1dJo8fWdr8PEaa3LloDjkCVrKFJwkWjgLzJ7d0JESyH6zR2f0IbSZZ646%2f0FkyMHjRCpZx7ZlUoaA9RVu9jrOIVCdWQ1vQIktFX51xTZBpOGhspoo8xE8k7LQwjOLLsgRDP5Gw4fh%2bQStJvZQYuR82YbYfs1UxK%2bVn8HQhxSv%2bVavU4vHpl09dpg2G3az24nx97G4ogPaA%3d%3d
Malware Config
Signatures
-
A potential corporate email address has been identified in the URL: SystemMailbox{0AF09B7F-434F-4B2F-9CBC-57639EDCFD9C}@goteborgenergise.onmicrosoft.com