General
- Target https://login.microsoft.com/common/oauth2/v2.0/authorize?state=amR0aG9ybnRvbkBzbWl0aHBldGVyc29uLmNvbQ==&scope=openid+profile+https%253A%252F%252Fgraph.microsoft.com%252FUser.Read&prompt=none&client_id=a290367d-0152-4d5b-be94-b68982a4093b&ref=4f63627562ef5ca73e11fe7e83f394bd&uri=https%25252525252
- Sample261022-d1lmsaxzct
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://login.microsoft.com/common/oauth2/v2.0/authorize?state=amR0aG9ybnRvbkBzbWl0aHBldGVyc29uLmNvbQ==&scope=openid+profile+https%253A%252F%252Fgraph.microsoft.com%252FUser.Read&prompt=none&client_id=a290367d-0152-4d5b-be94-b68982a4093b&ref=4f63627562ef5ca73e11fe7e83f394bd&uri=https%25252525252
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target https://login.microsoft.com/common/oauth2/v2.0/authorize?state=amR0aG9ybnRvbkBzbWl0aHBldGVyc29uLmNvbQ==&scope=openid+profile+https%253A%252F%252Fgraph.microsoft.com%252FUser.Read&prompt=none&client_id=a290367d-0152-4d5b-be94-b68982a4093b&ref=4f63627562ef5ca73e11fe7e83f394bd&uri=https%25252525252
-
A potential corporate email address has been identified in the URL