hxxps://gfy[.]bst10cloud[.]com/identityserver/connect/authorize/callback?response_type=code%20id_token&nonce=bI5ksFMfyrcOR7dze4ycEA&state=_9n4wp745XABl4CtPjLC2A&code_challenge=Rzk1eO-NENCTp7tWo89D8wODAa42kBiEeUm1PkdZ6GM&code_challenge_method=S256&client_id=58cBTWueQwL5&scope=openid%20profile%20email%20primarysid%20upn&redirect_uri=http%3A%2F%2F127[.]0[.]0[.]1%2FAutoUpdater&response_mode=form_post&acr_values=idp%3AAzureScheme&login_hint=khansen@georgefyoung[.]com

General

Target

https://gfy.bst10cloud.com/identityserver/connect/authorize/callback?response_type=code%20id_token&nonce=bI5ksFMfyrcOR7dze4ycEA&state=_9n4wp745XABl4CtPjLC2A&code_challenge=Rzk1eO-NENCTp7tWo89D8wODAa42kBiEeUm1PkdZ6GM&code_challenge_method=S256&client_id=58cBTWueQwL5&scope=openid%20profile%20email%20primarysid%20upn&redirect_uri=http%3A%2F%2F127.0.0.1%2FAutoUpdater&response_mode=form_post&acr_values=idp%3AAzureScheme&[email protected]
Sample

250328-m2nyzawr15

Score

8^/10

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact