General
- Target https://login.microsoftonline.com/common/oauth2/v2.0/authorize?cas=eyJzdGF0ZSI6IntcImFjdGl2ZUFwcHN0YW5jZXNcIjpbMjE0NjQ3MDMzNiwtMSwyMTQ2NDUwNjcyLDIxNDY0NDY1OTQsMjE0NjQ4NzkzOSwyMTQ2NDYxMTI3LDIxNDY0NjI2NjQsMjE0NjQ1NTk2NCwyMTQ2NDYyNjIwLDIxNDY0NTU5NjUsMjE0NjQ0OTU4MV0sXCJpc05vbmNlRmxvd1wiOmZhbHNlLFwiaXNBZG1pblN1ZmZpeFwiOmZhbHNlLFwiZGVzaWduYXRlZFN1ZmZpeFwiOlwibWNhcy5tc1wiLFwidGlkXCI6NTU5NDU0NjAsXCJ0c2lkXCI6bnVsbCxcImN0eFwiOm51bGx9IiwiZm9yY2Vfcm91dGVfdG9fY2FzIjp0cnVlLCJzdWZmaXgiOiJtY2FzLm1zIn0%3D&client-request-id=f5904452-ce63-1f3f-c13d-1a86d9eb1466&client_id=4765445b-32c6-49b0-83e6-1d93765276ca&login_hint=MARTINEZCA%40bancsabadell.com&nonce=639250886316026859.NDVhZDc3M2UtZTA0My00M2RjLWEyMzQtZjYwZjU3OWZjYjE3MDNmZDU3MjItNTg5Ny00ODg5LTkzMzUtYTc1ZTIzNzU4MTY1&redirect_uri=https%3A%2F%2Fm365.cloud.microsoft%2Flandingv2&response_mode=form_post&response_type=code+id_token&return-client-request-id=true&scope=openid+profile+offline_access+https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&state=b3QbZMONZbFUW_-0lrHGLlgyoH-CaVU8AOCKh_3dP9WkOeQtmtb7Wvn4-HbWsaYmXl0GARR8Qq1-bK02gaN_Hvd7b4q-FGsfEHb_0hz6Y6CpdZ5cMpRdJSCN8r3liDfWohStS5Jto8EXiXodZv3AuB7Cliq3GNTIWI8djJqdSyGTNmA4NJT3TAeFx1HsAYLsJyen41geHWLLAM9Vl1GZkTHc4okr-560g5XyuMlHHarHtu1Sh8fpscDnP_-mF2RcEXxHSpkc1ZaFuK_3ETpKoe3OX2IX6YKs4V09YGoB7cAyY6xtGAb3Z6zNTYTlj3DS6ufz2RynFCCf-Wl6SSkkAbfz80kLstpMHzQLce9J8IZ53Li6zT1soq0Oj0KmiMtm04Vl24hqbexgWp9zpp5uZSsPMpz-AEv7yaZlLddtTl-7r0fFwRqF2R8yRjFFBk5D5CbWq0SyaUyZk9NXeNdAGKojNR4SFjEU47-ocpfTJgUIkMgs10E5hDETSeLgSod-dzpe3aVj_qjIrWBNf_RwSQ&x-client-SKU=ID_NET8_0&x-client-ver=8.14.0.0
- Sample260916-ne3dhsan81
Score
7/10
Malware Config
Signatures
- A potential corporate email address has been identified in the URL: [email protected]