General

  • Target
    https://nam.safelink.emails.azure.net/redirect/?destination=https://account.microsoft.com/family/invite-accept?invitationToken=AgEBAAAA19tNNFHyNqri7aic_C2q7576hyEv0BynV8-ctZNKgwuIzZcYvKUg50AeD-XuC2v4xFT5h1lLo71SzjHk0qWAKZBD7H-E9lq8mKTAgUS8jD80cTcJwoS_iD4VxAAynbqeD1FV9zZha0HhbyuWLTiioHs8A_O8yAIELf6U_f8d9Du8IzJexUJy7KEAZzrOtxPfp-aQ8jN7YtNEgF6OehPSrF373LmvLSb8YIkU58w8RK4Dzp7KYQK8FIq4vdIZDybHpzOQo_HUXG7z7Te1xvByUZSLb2fDDRiC1oeRPSwmypQ%3d&cid=-7912055196698894848&email=aml5b29uLmtpbUBzay5jb20%3d&ma=1&lang=en-US&scenario=&role=User&C=TTYyqzBY7eir
  • Sample260824-asmnbsw1ew

Malware Config

Targets

    • Target
      https://nam.safelink.emails.azure.net/redirect/?destination=https://account.microsoft.com/family/invite-accept?invitationToken=AgEBAAAA19tNNFHyNqri7aic_C2q7576hyEv0BynV8-ctZNKgwuIzZcYvKUg50AeD-XuC2v4xFT5h1lLo71SzjHk0qWAKZBD7H-E9lq8mKTAgUS8jD80cTcJwoS_iD4VxAAynbqeD1FV9zZha0HhbyuWLTiioHs8A_O8yAIELf6U_f8d9Du8IzJexUJy7KEAZzrOtxPfp-aQ8jN7YtNEgF6OehPSrF373LmvLSb8YIkU58w8RK4Dzp7KYQK8FIq4vdIZDybHpzOQo_HUXG7z7Te1xvByUZSLb2fDDRiC1oeRPSwmypQ%3d&cid=-7912055196698894848&email=aml5b29uLmtpbUBzay5jb20%3d&ma=1&lang=en-US&scenario=&role=User&C=TTYyqzBY7eir
    • A potential corporate email address has been identified in the URL

    • Detected potential entity reuse from brand MICROSOFT.

MITRE ATT&CK Enterprise v16

Tasks