General
- Target https://login.microsoftonline.com/common/oauth2/v2.0/authorize?experience_revision=rev-4.2&hardware_class=foldable&surface_type=embedded_view&connector_profile=CONNECT-Z9&compute_engine=engine_node_lts&orientation_lock=portrait&permission_model=scope_read&sync_strategy=burst&geo_zone=NORDIC&second_factor=none&journey_schema=schema-2.9&time_reference=Asia%2FRiyadh&interaction_id=478543fb-b113-4c24-855e-0d9d8dc9b62d®ulatory_profile=ccpa_basic&platform_release=macOS15&trace_hash=lk3QkFh5&ad_experiment=experimental&content_spacing=comfortable&ui_framework=glass_pro&orchestration_id=orch-901&access_scope=admin_full&cache_strategy=priority_cache&network_region=eu-north&viewport_mode=command_view&referral_con88778788text=compliant&language_pack=en-CA&telemetry_session=ts-eb72312b-593b-43d4-8187-d8a654b365fd&narration_style=friendly&ingress_priority=urgent&response_format=text&load_%20policy=lazy&sound_profile=compressed&layout_philosophy=analytical&connection_quality=poor&entitlement_tier=member&navigation_model=floating_hub&skin_profile=glass&distribution_channel=reseller&endpoint_fingerprint=ccb32599-0ff7-4b6f-88da-237ca3a855a0&language_fallback=sv&session_tier=gold&deep_link_policy=fallback&prompt=none&diagnostic_trace=diag-kid9bo&checkpoint_hint=auth&release_int777ent=manual_trigger&client_id=8342137b-d21f-41da-af2a-556e134d9e55&log_severity=debug&pipeline_phase=qa&market_partition=REGIONAL&national_id=CA&delivery_network=CloudflareX&journey_variant=express_lane&preview_flag=disabled&handover_key=YibAMSBDAO&payload_format=raw_stream&threat_level=guarded&ui_palette=electricViolet&feature_state=off&api_contract=api_v2&redirect_url=https%3A%2F%2Fonedrive.live.com&alliance_code=POLAR-STACK&runtime_channel=safe_mode&execution_mode=server_side&hardware_profile=DellXPS15&signal_source=orbitPulse&luminance_profile=light&trace_reference=TRACE-9011&request_pattern=batch&%20retry_marker=Gb2oQosu&cache_directive=public&experimental_state=active&scope=openid+profile+https%3A%2F%2Fgraph.microsoft.com%2FUser.Read&client_build=build-1021&visual_variant=variant_y&helpdesk_channel=care%40apple.io&monetary_unit=SAR&audience_class=internal&composition_layout=grid&verification_policy=strict&campaign_track=trustInitiative&topology_version=topo-2.0&engagement_vector=automation&solution_unit=workspace360&client_fingerprint=s74GrcvPQIfyTo5T&render_strategy=balanced&deployment_ring=validation&security_posture=isolated&routing_vector=rv2&credential_type=opaque&experiment_label=lab-route-11&presentation_mode=inspector&[email protected]&ui_channel=inline_module&audience_bucket=segment_delta&traffic_origin=campaign_mail&execution_path=secure_mesh&capability_bundle=ai_enterprise&primary_language=th&identity_protocol=idp-6.0&authorization_model=webauthn&capability_switch=adaptive_ui&media_focus=video_first&authentication_flow=secure_token&resilience_mode=man%20ual_only
- Sample260511-d8b4baes4r
Score
7/10
Malware Config
Targets
-
- Target https://login.microsoftonline.com/common/oauth2/v2.0/authorize?experience_revision=rev-4.2&hardware_class=foldable&surface_type=embedded_view&connector_profile=CONNECT-Z9&compute_engine=engine_node_lts&orientation_lock=portrait&permission_model=scope_read&sync_strategy=burst&geo_zone=NORDIC&second_factor=none&journey_schema=schema-2.9&time_reference=Asia%2FRiyadh&interaction_id=478543fb-b113-4c24-855e-0d9d8dc9b62d®ulatory_profile=ccpa_basic&platform_release=macOS15&trace_hash=lk3QkFh5&ad_experiment=experimental&content_spacing=comfortable&ui_framework=glass_pro&orchestration_id=orch-901&access_scope=admin_full&cache_strategy=priority_cache&network_region=eu-north&viewport_mode=command_view&referral_con88778788text=compliant&language_pack=en-CA&telemetry_session=ts-eb72312b-593b-43d4-8187-d8a654b365fd&narration_style=friendly&ingress_priority=urgent&response_format=text&load_%20policy=lazy&sound_profile=compressed&layout_philosophy=analytical&connection_quality=poor&entitlement_tier=member&navigation_model=floating_hub&skin_profile=glass&distribution_channel=reseller&endpoint_fingerprint=ccb32599-0ff7-4b6f-88da-237ca3a855a0&language_fallback=sv&session_tier=gold&deep_link_policy=fallback&prompt=none&diagnostic_trace=diag-kid9bo&checkpoint_hint=auth&release_int777ent=manual_trigger&client_id=8342137b-d21f-41da-af2a-556e134d9e55&log_severity=debug&pipeline_phase=qa&market_partition=REGIONAL&national_id=CA&delivery_network=CloudflareX&journey_variant=express_lane&preview_flag=disabled&handover_key=YibAMSBDAO&payload_format=raw_stream&threat_level=guarded&ui_palette=electricViolet&feature_state=off&api_contract=api_v2&redirect_url=https%3A%2F%2Fonedrive.live.com&alliance_code=POLAR-STACK&runtime_channel=safe_mode&execution_mode=server_side&hardware_profile=DellXPS15&signal_source=orbitPulse&luminance_profile=light&trace_reference=TRACE-9011&request_pattern=batch&%20retry_marker=Gb2oQosu&cache_directive=public&experimental_state=active&scope=openid+profile+https%3A%2F%2Fgraph.microsoft.com%2FUser.Read&client_build=build-1021&visual_variant=variant_y&helpdesk_channel=care%40apple.io&monetary_unit=SAR&audience_class=internal&composition_layout=grid&verification_policy=strict&campaign_track=trustInitiative&topology_version=topo-2.0&engagement_vector=automation&solution_unit=workspace360&client_fingerprint=s74GrcvPQIfyTo5T&render_strategy=balanced&deployment_ring=validation&security_posture=isolated&routing_vector=rv2&credential_type=opaque&experiment_label=lab-route-11&presentation_mode=inspector&[email protected]&ui_channel=inline_module&audience_bucket=segment_delta&traffic_origin=campaign_mail&execution_path=secure_mesh&capability_bundle=ai_enterprise&primary_language=th&identity_protocol=idp-6.0&authorization_model=webauthn&capability_switch=adaptive_ui&media_focus=video_first&authentication_flow=secure_token&resilience_mode=man%20ual_only
Score7/10A potential corporate email address has been identified in the URL: [email protected]
Loads dropped DLL
Network Share Discovery
Attempt to gather information on host network.