General

  • Target

    https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=imagetotals%40hancockbank.com&senderemailaddress=Bethany.Edwards%40fisglobal.com&senderorganization=AwGAAAAAAnwAAAADAQAAAAdT350wuMlCvwJMl6hSu%2bRPVT1maXNnbG9iYWwub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1FVVJQUjA4QTAwMyxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NHHfSqX9je0ugdl9QR0iGp0NOPUNvbmZpZ3VyYXRpb24sQ049ZmlzZ2xvYmFsLm9ubWljcm9zb2Z0LmNvbSxDTj1Db25maWd1cmF0aW9uVW5pdHMsREM9RVVSUFIwOEEwMDMsREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTQE%3d&messageid=%3cDB5PR08MB102335D6389BDA3D0D978FD08F3712%40DB5PR08MB10233.eurprd08.prod.outlook.com%3e&cfmRecipient=SystemMailbox%7b3e0fae8e-1f31-4f04-acd4-c2d2426c2a17%7d%40fisglobal.onmicrosoft.com&consumerEncryption=false&senderorgid=e3ff91d8-34c8-4b15-a0b4-18910a6ac575&urldecoded=1&e4e_sdata=Ip9jhV2l4BNSdwsupHCw9UshVmBIYL9mTsFLqG7IZhgJN5xvhm%2bTo5QNMwtlsnPxAXKbAlOayKTHPpQ2BSIrIikMBFfmbz8mS2v3%2f9b9w6nsEw64g2iGoVjkCnQVUcnC7SBm2Zwp3UcMHicUrfsRouQsftiS7qWtFbuhgLpXEM5Vlhbn9SCCoXn%2fVpcJMCAKEUPqrjbOuwo0u4WATdmVbRKsMluoHUdjIVouCDhPQElKZgoeh%2fYu2QUABxnTk%2bjZbN1oc5j7bOAC%2fms2%2b4wLWhPyeZJisEVzci1IxkHC5PQ%2bIN02seyMjUMuDLz95ad3cgjy%2fK433ipnm6WUt%2feHKA%3d%3d

Score
8/10

Malware Config

Signatures

  • A potential corporate email address has been identified in the URL: SystemMailbox{3e0fae8e-1f31-4f04-acd4-c2d2426c2a17}@fisglobal.onmicrosoft.com

Files