Overview

overview

10

Static

static

1

URLScan

urlscan

10

https://eu-west-1.pr...

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target
    https://eu-west-1.protection.sophos.com/?d=sharepoint.com&u=aHR0cHM6Ly9ibnNlcnZlaXMtbXkuc2hhcmVwb2ludC5jb20vOm86L2cvcGVyc29uYWwvc2VydmVpc19iZW5hemV0bmF2YXJyb19jb20vSWdEYkpuQTZMWnEtUzVwMW8zR203MHZLQWFBWndlSnVfSkNpLTFxRXNjZzAtSDQ_ZT12QnBEUWk=&p=m&i=NjI1NmNkYjEwY2Y2NTQxMTdkZmM5YzFl&t=enkvd2JFaE1KZTM1UzF4Q0hSTEFVdFlsaEgwMFN1VzV2QjlqbHhaMjF2cz0=&h=8f9cb8797e4b4fa0a8aa4dacc0ed249f&s=AVNPUEhUT0NFTkNSWVBUSVYJM8pHcbaucRJKkRDOGXEDMXs2-60jIxVZkpjpyU-agw
  • Sample260901-jmkq8abf96
Score
10/10
documentluremicrosoftdiscoveryphishing

Malware Config

Targets

    • Target
      https://eu-west-1.protection.sophos.com/?d=sharepoint.com&u=aHR0cHM6Ly9ibnNlcnZlaXMtbXkuc2hhcmVwb2ludC5jb20vOm86L2cvcGVyc29uYWwvc2VydmVpc19iZW5hemV0bmF2YXJyb19jb20vSWdEYkpuQTZMWnEtUzVwMW8zR203MHZLQWFBWndlSnVfSkNpLTFxRXNjZzAtSDQ_ZT12QnBEUWk=&p=m&i=NjI1NmNkYjEwY2Y2NTQxMTdkZmM5YzFl&t=enkvd2JFaE1KZTM1UzF4Q0hSTEFVdFlsaEgwMFN1VzV2QjlqbHhaMjF2cz0=&h=8f9cb8797e4b4fa0a8aa4dacc0ed249f&s=AVNPUEhUT0NFTkNSWVBUSVYJM8pHcbaucRJKkRDOGXEDMXs2-60jIxVZkpjpyU-agw
    Score
    6/10
    microsoftdiscoveryphishing

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

      discovery

    • Detected potential entity reuse from brand MICROSOFT.

      phishingmicrosoft
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks