General
- Target https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=ad6e00b7-eadc-4035-92c5-dbe0f0beb221@phisher.knowbe4.com&[email protected]&senderorganization=AwGIAAAAAoQAAAADAQAAAFmawJCMiF1MmLu3Uim77upPVT1wcm9zcGVyaXR5YmFua3VzYS5vbm1pY3Jvc29mdC5jb20sT1U9TWljcm9zb2Z0IEV4Y2hhbmdlIEhvc3RlZCBPcmdhbml6YXRpb25zLERDPU5BTVBSMDhBMDEwLERDPVBST0QsREM9T1VUTE9PSyxEQz1DT01k4OjDmfcxQ4w/5wdX4bfJQ049Q29uZmlndXJhdGlvbixDTj1wcm9zcGVyaXR5YmFua3VzYS5vbm1pY3Jvc29mdC5jb20sQ049Q29uZmlndXJhdGlvblVuaXRzLERDPU5BTVBSMDhBMDEwLERDPVBST0QsREM9T1VUTE9PSyxEQz1DT00B&messageid=%3CPH0PR08MB70350BFE7F532BD99205E0AB94F52@PH0PR08MB7035.namprd08.prod.outlook.com%3E&cfmRecipient=SystemMailbox%7B10974a25-00ed-4a2e-b4a7-9b5ef857a413%[email protected]&consumerEncryption=false&senderorgid=00eda10c-f32f-45b8-8e91-257da01a8f7c&urldecoded=1&e4e_sdata=tL1wqzUtoDWFoE5U9mJSR1jU+Z23spWU81U1Vs02B+406e4FZj3t/MWlAVUsvkFTz/x1XRBdldS05h1komuwz0e6yslDkjJB5Sr4A/lCaCd0e93QNdvYHiFyFGMXV77SOYQz+SCGjNGdGfHKRNxZ/gRJOsn0XbfRW7ChSjBXWu7m1ICT78DwH73m0/nJqWK7ARLls8+QGAIbq1nkb9I8+D4WU8AgwURQYPLs/VIqoMtLAsKThvKVKeYnjMhSGe0kONbhjCMTwD0AiWPXxRzk2xDvu54ih5RR6HxQ6mFzxnv+DmurUUnlqsSTSj+wKTIK6/rKZE0/u3azipIhMdprNA==
- Sample260702-x3xmlshy8k
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=ad6e00b7-eadc-4035-92c5-dbe0f0beb221@phisher.knowbe4.com&[email protected]&senderorganization=AwGIAAAAAoQAAAADAQAAAFmawJCMiF1MmLu3Uim77upPVT1wcm9zcGVyaXR5YmFua3VzYS5vbm1pY3Jvc29mdC5jb20sT1U9TWljcm9zb2Z0IEV4Y2hhbmdlIEhvc3RlZCBPcmdhbml6YXRpb25zLERDPU5BTVBSMDhBMDEwLERDPVBST0QsREM9T1VUTE9PSyxEQz1DT01k4OjDmfcxQ4w/5wdX4bfJQ049Q29uZmlndXJhdGlvbixDTj1wcm9zcGVyaXR5YmFua3VzYS5vbm1pY3Jvc29mdC5jb20sQ049Q29uZmlndXJhdGlvblVuaXRzLERDPU5BTVBSMDhBMDEwLERDPVBST0QsREM9T1VUTE9PSyxEQz1DT00B&messageid=%3CPH0PR08MB70350BFE7F532BD99205E0AB94F52@PH0PR08MB7035.namprd08.prod.outlook.com%3E&cfmRecipient=SystemMailbox%7B10974a25-00ed-4a2e-b4a7-9b5ef857a413%[email protected]&consumerEncryption=false&senderorgid=00eda10c-f32f-45b8-8e91-257da01a8f7c&urldecoded=1&e4e_sdata=tL1wqzUtoDWFoE5U9mJSR1jU+Z23spWU81U1Vs02B+406e4FZj3t/MWlAVUsvkFTz/x1XRBdldS05h1komuwz0e6yslDkjJB5Sr4A/lCaCd0e93QNdvYHiFyFGMXV77SOYQz+SCGjNGdGfHKRNxZ/gRJOsn0XbfRW7ChSjBXWu7m1ICT78DwH73m0/nJqWK7ARLls8+QGAIbq1nkb9I8+D4WU8AgwURQYPLs/VIqoMtLAsKThvKVKeYnjMhSGe0kONbhjCMTwD0AiWPXxRzk2xDvu54ih5RR6HxQ6mFzxnv+DmurUUnlqsSTSj+wKTIK6/rKZE0/u3azipIhMdprNA==
Resource
win10v2004-20260513-en
Malware Config
Targets
-
- Target https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=ad6e00b7-eadc-4035-92c5-dbe0f0beb221@phisher.knowbe4.com&[email protected]&senderorganization=AwGIAAAAAoQAAAADAQAAAFmawJCMiF1MmLu3Uim77upPVT1wcm9zcGVyaXR5YmFua3VzYS5vbm1pY3Jvc29mdC5jb20sT1U9TWljcm9zb2Z0IEV4Y2hhbmdlIEhvc3RlZCBPcmdhbml6YXRpb25zLERDPU5BTVBSMDhBMDEwLERDPVBST0QsREM9T1VUTE9PSyxEQz1DT01k4OjDmfcxQ4w/5wdX4bfJQ049Q29uZmlndXJhdGlvbixDTj1wcm9zcGVyaXR5YmFua3VzYS5vbm1pY3Jvc29mdC5jb20sQ049Q29uZmlndXJhdGlvblVuaXRzLERDPU5BTVBSMDhBMDEwLERDPVBST0QsREM9T1VUTE9PSyxEQz1DT00B&messageid=%3CPH0PR08MB70350BFE7F532BD99205E0AB94F52@PH0PR08MB7035.namprd08.prod.outlook.com%3E&cfmRecipient=SystemMailbox%7B10974a25-00ed-4a2e-b4a7-9b5ef857a413%[email protected]&consumerEncryption=false&senderorgid=00eda10c-f32f-45b8-8e91-257da01a8f7c&urldecoded=1&e4e_sdata=tL1wqzUtoDWFoE5U9mJSR1jU+Z23spWU81U1Vs02B+406e4FZj3t/MWlAVUsvkFTz/x1XRBdldS05h1komuwz0e6yslDkjJB5Sr4A/lCaCd0e93QNdvYHiFyFGMXV77SOYQz+SCGjNGdGfHKRNxZ/gRJOsn0XbfRW7ChSjBXWu7m1ICT78DwH73m0/nJqWK7ARLls8+QGAIbq1nkb9I8+D4WU8AgwURQYPLs/VIqoMtLAsKThvKVKeYnjMhSGe0kONbhjCMTwD0AiWPXxRzk2xDvu54ih5RR6HxQ6mFzxnv+DmurUUnlqsSTSj+wKTIK6/rKZE0/u3azipIhMdprNA==
-
A potential corporate email address has been identified in the URL: SystemMailbox10974a2500ed4a2eb4a79b5ef857a413@prosperitybankusa.onmicrosoft.com