General
- Target https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=francesca.gatto%40primapower.com&senderemailaddress=Annetta.Nyman%40etola.fi&senderorganization=AwF8AAAAAngAAAADAQAAAMxp6KoS9JRCq9r2P%2bw%2fr1xPVT1ldG9sYS5vbm1pY3Jvc29mdC5jb20sT1U9TWljcm9zb2Z0IEV4Y2hhbmdlIEhvc3RlZCBPcmdhbml6YXRpb25zLERDPUVVUlBSMDJBMDExLERDPVBST0QsREM9T1VUTE9PSyxEQz1DT00qzelNi4eUQ5ZZu2w%2fchM6Q049Q29uZmlndXJhdGlvbixDTj1ldG9sYS5vbm1pY3Jvc29mdC5jb20sQ049Q29uZmlndXJhdGlvblVuaXRzLERDPUVVUlBSMDJBMDExLERDPVBST0QsREM9T1VUTE9PSyxEQz1DT00B&messageid=%3cGVXPR02MB1220484E2EE60A3D0AD681EBE966E2%40GVXPR02MB12204.eurprd02.prod.outlook.com%3e&cfmRecipient=SystemMailbox%7b0AF09B7F-434F-4B2F-9CBC-57639EDCFD9C%7d%40etola.onmicrosoft.com&consumerEncryption=false&senderorgid=a9667f8a-8c87-4e68-8303-6ce8bff24f25&urldecoded=1&e4e_sdata=Puk9zcTPhtJvxZY8dEA59FXoUBIHAc3SsfY%2beTxtPhW9ZYH0HrQmDlS9X9kZIrRfwZbWE8wM1FzT146J1Zbjh6XaWW3xjRPgUHrkWHZU8mvevhsDLH3Osj%2fIj3xAhXACyJtd8ai%2b2VtLUEae9mneliqPiDovIbx5WWx9%2fwQnakobMHrsQNsjv6wWG6YOfZ1ILwP6Xk%2fQ7RpzHOu5in7bQ%2fJFRffMgE3OMt0f4teg7l41u2g6G%2fYtI1BborHromEsuekbWU2VNs3jJKb2sTor4qznHmj7%2fzq6Pg1LFaJQqwJWcK1Fic129TxJpkmehh8J7S%2bukBK8pqpghRSYShfJgQ%3d%3d
- Sample261029-y4d3bss18k
Score
7/10
Malware Config
Targets
-
- Target https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=francesca.gatto%40primapower.com&senderemailaddress=Annetta.Nyman%40etola.fi&senderorganization=AwF8AAAAAngAAAADAQAAAMxp6KoS9JRCq9r2P%2bw%2fr1xPVT1ldG9sYS5vbm1pY3Jvc29mdC5jb20sT1U9TWljcm9zb2Z0IEV4Y2hhbmdlIEhvc3RlZCBPcmdhbml6YXRpb25zLERDPUVVUlBSMDJBMDExLERDPVBST0QsREM9T1VUTE9PSyxEQz1DT00qzelNi4eUQ5ZZu2w%2fchM6Q049Q29uZmlndXJhdGlvbixDTj1ldG9sYS5vbm1pY3Jvc29mdC5jb20sQ049Q29uZmlndXJhdGlvblVuaXRzLERDPUVVUlBSMDJBMDExLERDPVBST0QsREM9T1VUTE9PSyxEQz1DT00B&messageid=%3cGVXPR02MB1220484E2EE60A3D0AD681EBE966E2%40GVXPR02MB12204.eurprd02.prod.outlook.com%3e&cfmRecipient=SystemMailbox%7b0AF09B7F-434F-4B2F-9CBC-57639EDCFD9C%7d%40etola.onmicrosoft.com&consumerEncryption=false&senderorgid=a9667f8a-8c87-4e68-8303-6ce8bff24f25&urldecoded=1&e4e_sdata=Puk9zcTPhtJvxZY8dEA59FXoUBIHAc3SsfY%2beTxtPhW9ZYH0HrQmDlS9X9kZIrRfwZbWE8wM1FzT146J1Zbjh6XaWW3xjRPgUHrkWHZU8mvevhsDLH3Osj%2fIj3xAhXACyJtd8ai%2b2VtLUEae9mneliqPiDovIbx5WWx9%2fwQnakobMHrsQNsjv6wWG6YOfZ1ILwP6Xk%2fQ7RpzHOu5in7bQ%2fJFRffMgE3OMt0f4teg7l41u2g6G%2fYtI1BborHromEsuekbWU2VNs3jJKb2sTor4qznHmj7%2fzq6Pg1LFaJQqwJWcK1Fic129TxJpkmehh8J7S%2bukBK8pqpghRSYShfJgQ%3d%3d
Score7/10-
A potential corporate email address has been identified in the URL