General
- Target https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=cvinh%40advancial.org&senderemailaddress=JBlanco%40ehealthscreenings.com&senderorganization=AwF%2fAAAAAnsAAAADAQAAAJnGavt1slZDlo%2bzc57hl%2fxPVT1vbnNpdGVoYy5vbm1pY3Jvc29mdC5jb20sT1U9TWljcm9zb2Z0IEV4Y2hhbmdlIEhvc3RlZCBPcmdhbml6YXRpb25zLERDPU5BTVBSMDhBMDEyLERDPVBST0QsREM9T1VUTE9PSyxEQz1DT006LafFoWCcSpdShXSurJWMQ049Q29uZmlndXJhdGlvbixDTj1vbnNpdGVoYy5vbm1pY3Jvc29mdC5jb20sQ049Q29uZmlndXJhdGlvblVuaXRzLERDPU5BTVBSMDhBMDEyLERDPVBST0QsREM9T1VUTE9PSyxEQz1DT00B&messageid=%3cSA1PR08MB1099727D980605B7B5E8B70F8B4C22%40SA1PR08MB10997.namprd08.prod.outlook.com%3e&cfmRecipient=SystemMailbox%7b0AF09B7F-434F-4B2F-9CBC-57639EDCFD9C%7d%40onsitehc.onmicrosoft.com&consumerEncryption=false&senderorgid=d2bfd729-d7ba-42e0-a954-b7acf826fbb6&urldecoded=1&e4e_sdata=Tkl4EG2Lhw26U8f6uFU9Iiey4B8%2bVThKm8SjMVfUMxge9xQ5OyXueSXMVlwL3PQEUOhajETpwkaWdi06g6zrHVcGo%2fBh4TgjNuCgJk%2fKvCO3PPRXY%2fga%2fXfXvaTVw7iGi5NFKuF%2bUVxJfCnthnY0Uek4PcSSMJdlda8nss%2fjlKK4e9LV3ZTW8n5X3rjGHhrpUf8UNl%2fc%2fk%2bAvOuy8Ta7XM8TNxXlf4lA7Ylpx6QhLL%2fXMSt5UMgLVabd3ve6FCxPFR74gXXriUS5P16ZaHMULP2nDNoRKQlIX%2b3Pg%2bUM2jgXz6eouAIcbfTJq7JITimdW%2fA0159AnqFkxUK7e8CdXw%3d%3d
- Sample260721-r2lk3ayanh
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=cvinh%40advancial.org&senderemailaddress=JBlanco%40ehealthscreenings.com&senderorganization=AwF%2fAAAAAnsAAAADAQAAAJnGavt1slZDlo%2bzc57hl%2fxPVT1vbnNpdGVoYy5vbm1pY3Jvc29mdC5jb20sT1U9TWljcm9zb2Z0IEV4Y2hhbmdlIEhvc3RlZCBPcmdhbml6YXRpb25zLERDPU5BTVBSMDhBMDEyLERDPVBST0QsREM9T1VUTE9PSyxEQz1DT006LafFoWCcSpdShXSurJWMQ049Q29uZmlndXJhdGlvbixDTj1vbnNpdGVoYy5vbm1pY3Jvc29mdC5jb20sQ049Q29uZmlndXJhdGlvblVuaXRzLERDPU5BTVBSMDhBMDEyLERDPVBST0QsREM9T1VUTE9PSyxEQz1DT00B&messageid=%3cSA1PR08MB1099727D980605B7B5E8B70F8B4C22%40SA1PR08MB10997.namprd08.prod.outlook.com%3e&cfmRecipient=SystemMailbox%7b0AF09B7F-434F-4B2F-9CBC-57639EDCFD9C%7d%40onsitehc.onmicrosoft.com&consumerEncryption=false&senderorgid=d2bfd729-d7ba-42e0-a954-b7acf826fbb6&urldecoded=1&e4e_sdata=Tkl4EG2Lhw26U8f6uFU9Iiey4B8%2bVThKm8SjMVfUMxge9xQ5OyXueSXMVlwL3PQEUOhajETpwkaWdi06g6zrHVcGo%2fBh4TgjNuCgJk%2fKvCO3PPRXY%2fga%2fXfXvaTVw7iGi5NFKuF%2bUVxJfCnthnY0Uek4PcSSMJdlda8nss%2fjlKK4e9LV3ZTW8n5X3rjGHhrpUf8UNl%2fc%2fk%2bAvOuy8Ta7XM8TNxXlf4lA7Ylpx6QhLL%2fXMSt5UMgLVabd3ve6FCxPFR74gXXriUS5P16ZaHMULP2nDNoRKQlIX%2b3Pg%2bUM2jgXz6eouAIcbfTJq7JITimdW%2fA0159AnqFkxUK7e8CdXw%3d%3d
Resource
win10v2004-20260513-en
Malware Config
Targets
-
- Target https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=cvinh%40advancial.org&senderemailaddress=JBlanco%40ehealthscreenings.com&senderorganization=AwF%2fAAAAAnsAAAADAQAAAJnGavt1slZDlo%2bzc57hl%2fxPVT1vbnNpdGVoYy5vbm1pY3Jvc29mdC5jb20sT1U9TWljcm9zb2Z0IEV4Y2hhbmdlIEhvc3RlZCBPcmdhbml6YXRpb25zLERDPU5BTVBSMDhBMDEyLERDPVBST0QsREM9T1VUTE9PSyxEQz1DT006LafFoWCcSpdShXSurJWMQ049Q29uZmlndXJhdGlvbixDTj1vbnNpdGVoYy5vbm1pY3Jvc29mdC5jb20sQ049Q29uZmlndXJhdGlvblVuaXRzLERDPU5BTVBSMDhBMDEyLERDPVBST0QsREM9T1VUTE9PSyxEQz1DT00B&messageid=%3cSA1PR08MB1099727D980605B7B5E8B70F8B4C22%40SA1PR08MB10997.namprd08.prod.outlook.com%3e&cfmRecipient=SystemMailbox%7b0AF09B7F-434F-4B2F-9CBC-57639EDCFD9C%7d%40onsitehc.onmicrosoft.com&consumerEncryption=false&senderorgid=d2bfd729-d7ba-42e0-a954-b7acf826fbb6&urldecoded=1&e4e_sdata=Tkl4EG2Lhw26U8f6uFU9Iiey4B8%2bVThKm8SjMVfUMxge9xQ5OyXueSXMVlwL3PQEUOhajETpwkaWdi06g6zrHVcGo%2fBh4TgjNuCgJk%2fKvCO3PPRXY%2fga%2fXfXvaTVw7iGi5NFKuF%2bUVxJfCnthnY0Uek4PcSSMJdlda8nss%2fjlKK4e9LV3ZTW8n5X3rjGHhrpUf8UNl%2fc%2fk%2bAvOuy8Ta7XM8TNxXlf4lA7Ylpx6QhLL%2fXMSt5UMgLVabd3ve6FCxPFR74gXXriUS5P16ZaHMULP2nDNoRKQlIX%2b3Pg%2bUM2jgXz6eouAIcbfTJq7JITimdW%2fA0159AnqFkxUK7e8CdXw%3d%3d
-
A potential corporate email address has been identified in the URL: [email protected]