hxxps://outlook[.]office365[.]com/Encryption/retrieve[.]ashx?recipientemailaddress=deirdre[.]gill%40dallascounty[.]org&senderemailaddress=BHankins%40seviersheriffar[.]org&senderorganization=AwGLAAAAAocAAAADAQAAAKRzVcay4cNKpd%2freaYFdBlPVT1zZXZpZXJjb3VudHJ5c2hlcmlmZi5vbm1pY3Jvc29mdC5jb20sT1U9TWljcm9zb2Z0IEV4Y2hhbmdlIEhvc3RlZCBPcmdhbml6YXRpb25zLERDPU5BTVBSMDNBMDA1LERDPVBST0QsREM9T1VUTE9PSyxEQz1DT00vsW9Q4dZFRIrp7kuO9ymkQ049Q29uZmlndXJhdGlvbixDTj1zZXZpZXJjb3VudHJ5c2hlcmlmZi5vbm1pY3Jvc29mdC5jb20sQ049Q29uZmlndXJhdGlvblVuaXRzLERDPU5BTVBSMDNBMDA1LERDPVBST0QsREM9T1VUTE9PSyxEQz1DT00B&messageid=%3cCH0PR14MB5108917F3006BC42DDBA6299B4A02%40CH0PR14MB5108[.]namprd14[.]prod[.]outlook[.]com%3e&cfmRecipient=SystemMailbox%7bD0E409A0-AF9B-4720-92FE-AAC869B0D201%7d%40seviercountrysheriff[.]onmicrosoft[.]com&consumerEncryption=false&senderorgid=b223690b-bda9-4eb5-991d-78138954b7ba&urldecoded=1&e4e_sdata=Ju2HpgcSMc8HKlknOOPmsx9bQy8aadCSsbC2lnTlhBu%2fnfsUkhSRNqY2C%2bJGKs1%2bELYZam9bf6snoTj7nFEneCUJ0HttQEfk%2baSfRIojyhy3elQRNmyTaf5BDPHtgWDrftvKh9ibFUu4esOPtzeebkki1uLYMC14JHw9%2fG4FO%2f0qYSFm03CxXXH%2f5Cr0OEimy3T1rvBpm%2fIg5%2fhQKhCqVL9BdCRK3z77OwvtSPICIk2HNGCFzcnj6mrVsBAX8nhSvKOY0d6hVFqyNFWm%2blAmUGkRN9pNqLYeYz2czmyPZPKlEJVcB1%2fRgGtZwwAWya4PwZDK%2bXPNq3BUu6vl9xFGuA%3d%3d

Sharing

Target
https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=deirdre.gill%40dallascounty.org&senderemailaddress=BHankins%40seviersheriffar.org&senderorganization=AwGLAAAAAocAAAADAQAAAKRzVcay4cNKpd%2freaYFdBlPVT1zZXZpZXJjb3VudHJ5c2hlcmlmZi5vbm1pY3Jvc29mdC5jb20sT1U9TWljcm9zb2Z0IEV4Y2hhbmdlIEhvc3RlZCBPcmdhbml6YXRpb25zLERDPU5BTVBSMDNBMDA1LERDPVBST0QsREM9T1VUTE9PSyxEQz1DT00vsW9Q4dZFRIrp7kuO9ymkQ049Q29uZmlndXJhdGlvbixDTj1zZXZpZXJjb3VudHJ5c2hlcmlmZi5vbm1pY3Jvc29mdC5jb20sQ049Q29uZmlndXJhdGlvblVuaXRzLERDPU5BTVBSMDNBMDA1LERDPVBST0QsREM9T1VUTE9PSyxEQz1DT00B&messageid=%3cCH0PR14MB5108917F3006BC42DDBA6299B4A02%40CH0PR14MB5108.namprd14.prod.outlook.com%3e&cfmRecipient=SystemMailbox%7bD0E409A0-AF9B-4720-92FE-AAC869B0D201%7d%40seviercountrysheriff.onmicrosoft.com&consumerEncryption=false&senderorgid=b223690b-bda9-4eb5-991d-78138954b7ba&urldecoded=1&e4e_sdata=Ju2HpgcSMc8HKlknOOPmsx9bQy8aadCSsbC2lnTlhBu%2fnfsUkhSRNqY2C%2bJGKs1%2bELYZam9bf6snoTj7nFEneCUJ0HttQEfk%2baSfRIojyhy3elQRNmyTaf5BDPHtgWDrftvKh9ibFUu4esOPtzeebkki1uLYMC14JHw9%2fG4FO%2f0qYSFm03CxXXH%2f5Cr0OEimy3T1rvBpm%2fIg5%2fhQKhCqVL9BdCRK3z77OwvtSPICIk2HNGCFzcnj6mrVsBAX8nhSvKOY0d6hVFqyNFWm%2blAmUGkRN9pNqLYeYz2czmyPZPKlEJVcB1%2fRgGtZwwAWya4PwZDK%2bXPNq3BUu6vl9xFGuA%3d%3d
Sample260824-ysc1wseh33

Score

7^/10

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact