General
-
Target
https://attachments.office.net/owa/jimmir%40eltiempo.com/service.svc/s/GetAttachmentThumbnail?id=AQMkADkyMzY5ZmMxLTU3YjYtNGFlNy1iZTczLTBhNTBmMDVjMTNjMABGAAADYhk3Tp76DEicwDVyEVo4pwcAR0xPeEhykki7c7sWkXlpywAAAgEMAAAAR0xPeEhykki7c7sWkXlpywACxAOfewAAAAESABAAzvbmF9YnSEuAslxd5N9YKA%3D%3D&thumbnailType=2&token=eyJhbGciOiJSUzI1NiIsImtpZCI6IkU1RDJGMEY4REE5M0I2NzA5QzQzQTlFOEE2MTQzQzAzRDYyRjlBODAiLCJ0eXAiOiJKV1QiLCJ4NXQiOiI1ZEx3LU5xVHRuQ2NRNm5vcGhROEE5WXZtb0EifQ.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.nKXJO67djIoKxDIyWNJNtrXNdEyDybHTcQrdU8MpnwR-IoS0Usgr8GvANU7_Z7UPaEwRF1_HbY5Pp0oHJzQxnWGQetui-RdgQeYbWWSQe52TDDTjW4G_PSJ-n-2zwl_pFp2N52XlAtF9A5sxD9OtBOgpe4dyLFEnq4c4zMSmrd4Nf_6CFc1pwuB3qByuVYulHPvmgIMgwNOgK1lubg3lKac1xFvV_lTVbboNvjzXFsgGOZmxN5E9-a-CZYjXH3dCar9qCI1uII1lclGoQY9hGmN2FJBng62ij5acjQB5NVxA87JpdmKTHSXJr_q-iukD3xMrfpKNYw0gRDQsgaXsCw&X-OWA-CANARY=bdvoV4uah7EAAAAAAAAAAACRUcts4twYDREBkJroKctAdxqJVPJzDsbKtkd4WGVvS7bseUcBkhM.&owa=outlook.office.com&scriptVer=20240920004.12&clientId=38A3A21753CB485E8025BD9F82BCA9EB&animation=true
Malware Config
Signatures
-
A potential corporate email address has been identified in the URL: [email protected]