General
-
Target
https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=marty.moran%40hancockwhitney.com&senderemailaddress=Snyder.Sabrina%40mayo.edu&senderorganization=AwF%2bAAAAAnoAAAADAQAAAFSljC%2fccMhMr9y3UzJ6kDFPVT1tY3Rvb2xzLm9ubWljcm9zb2Z0LmNvbSxPVT1NaWNyb3NvZnQgRXhjaGFuZ2UgSG9zdGVkIE9yZ2FuaXphdGlvbnMsREM9TkFNUFIwMkE5MDAsREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTViYWIUwG%2fxJgt6Den%2fTNSpDTj1Db25maWd1cmF0aW9uLENOPW1jdG9vbHMub25taWNyb3NvZnQuY29tLENOPUNvbmZpZ3VyYXRpb25Vbml0cyxEQz1OQU1QUjAyQTkwMCxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NAQ%3d%3d&messageid=%3cDS0PR01MB7937B0C1421B6AF6A09186F2E7712%40DS0PR01MB7937.prod.exchangelabs.com%3e&cfmRecipient=SystemMailbox%7b6C0A1EFA-EC06-4AF8-8120-E8DF728D24A6%7d%40mctools.onmicrosoft.com&consumerEncryption=false&senderorgid=a25fff9c-3f63-4fb2-9a8a-d9bdd0321f9a&urldecoded=1&e4e_sdata=ueX69nK5co9GUnsINPLj4vCtQMeFwZ9qRCEW6X67sTXKg%2bRtCQwvhBV4tE1KupG8iBICvQ5NRmtnEW%2fczn2swQgVPStoefUVxPatFDx3Ej8KOYaAIF47P5wIsku%2b3KCpWHFEWt%2b0Yj71Qjwsm6CAdjkSl6bzECPAmdePIT6EwcjTCQgI3pyoSfvUEN3u6%2f5hEiDm%2fUecSYw58V38onfFh8VfFHihPs118HCdI3peqiKsgaQFu5D%2fJa3J%2bAGi69fZnmjnaIi1uxkjvoEDjIPYAHrokSDNT8mYAwIHYX6%2bKws%2fVXhxz8P8hmSubbmQweVqvOQGhfiqySABXpmioXbx1Q%3d%3d
Malware Config
Signatures
-
A potential corporate email address has been identified in the URL: <DS0PR01MB7937B0C1421B6AF6A09186F2E7712@DS0PR01MB7937.prod.exchangelabs.com>