hxxps://login[.]microsoftonline[.]com[//][//][//][//][//][//][//][//][//]/common/oauth2/v2[.]0/authorize?client_id=8e1f1d30-ad29-4a0b-916d-ed3cacf6e5dc&response_type=code&response_mode=query&scope=openid+profile+email+https%3A%2F%2Fgraph[.]microsoft[.]com%2FUser[.]Read&prompt=none&state=cnNpbGJlcnNjaGVpbkBiYWNrc3RvcHNvbHV0aW9ucy5jb20=&ref_right=943624ae95c9ea3e4708da76439a3f1c&payload281=TmhOWjY0ZkE1b2tOak9iUTVWME9oYmI3UlJtVXlRWjdwaE5nZUNTblVEelZvWmNVYWRNYnNjczVCUU5tbHU4bzZ4SzBlSUNqcGFKbXhIcklUS2hSNkU0NWdSQzA3NGpsMVpmaVN0cWZ6V29INjJvZmFGUlNSWkxuWllIc3FUWFJuenF1elRlZjd2V1cwY3E5WGVyTkJpUDFQdktCOE1OeEVxQld4VFIzN0ZMZDZKbVB0M2M5RVl3NVBZV0hoMDduQzl4VERjaDlWM0VSRnNvRkJxNTBacE5lRjk5ZXE0d09MYnVOZHNwR3lEUlN2UFlE&session_data904=eG01UWFCQTdVb0VOY3VWZFh4YXRaTzB6SkZHQXF0NzA5bmU5RFJ1UmNoaUVhMHZwUmx1UzNoSjJsaDFVbkVrbU5tcFpyZkJGVjBtbnJZaWk0aDVudU9QaWc1RmlIYjd3T2Zkc2R3ZGxDeWFwVVd5dzJUVWFPaFdpN0xtb2pqTVFoTktjT1o1aTk5dFZYeDNwSXVZenBXVUtGREcySXRxTnVHRExCM3BjZUlVTjEwZ205UTZJdkxQcVMyTzM1Tm40R3dqMU1PUEJkaG1yUGl3b2pyZGtvRUg2UHN4YTVsbUZ3TzN4cEhLU3pHYjZVMkdP&payload730=dTdCRWFrZzBHcmdHRjcwN3NzdkJHaFQwbmg0OEJrZDQ3ajNtZWRVZTlzeVlWdVM1OVhkMWpwNnpTMTgzdG1CaDM4dlN2R29NbWdpVkxBV2FJbjU5dXFrVjBoM25DampTS0RhNUl2YnhlMXhNMHFZSjA4YVpsTFFpeXVtZFlES2tNYTRDWXFsZTJIZnF1QzVSM0hkVGNIUURldWU3UkZ6c2s0N25lNjZrVHhCRUZyeW1lc0d2cGV3Y1VLZVVINDRLc0RpcDFKOXMyZVhmZFhzR1pQTDJCZjlJc1czTUdnQlVlT3BFQ0VYcElOdEFFakcy&context99=a1Fod1ZoU3pnMmd5WGZiSU5ZQWdpUkJhQ01mcE9BTzgwZTFCZ0JUdTRHMkFHQ0U4djczMTh5dm9hU0FSNzlYUXVoRFlIa1gwN0Jaa0dYc05GcGxoZGh4RHY2c3FmSU15MjlDTFhtbENvQU9vZVc3TFBFN2xna1NoMUNKU1RGUmxkbWYzNGhrcXBKMkFaYWhiek1hV0twNDc2MGJHc1RyY1dNUGVhVWVNVWY0eVViQ0RQaGhsWENtenhyN2xjWXRSOFdSOFowT3NpbmttVlRxSE13YjcweDlsOHRTUTV4dkZqd2pjc0xsR3ltZDJsQkcz&config497=eHo2dkZBMUEwY3pBZWhCaUd6QmtGZU1KVDNsYU5jNFhBVFV5MEpXMlo4QktEdU1QQnBiTGFiTVBQSVlpM2RodTFYQjJDOHd0b01SRTlkdDdINGtSMDJTd3R6bjZxYW5oYnhaQjlhY1B2M1lSSGltT3lacUhWZ0lNQVdHZHBPUk9QVFhRZUdrdnVwTTVVQmNma1NaS0RMZThoSkxqUXp6bkZEbjFneUhCaUVFZjYwS0trcXBWbHo4d25ScFcwdkw2ZXdsWGc5eXBBbGNlZXJzbDJuZ2RCUEk0bFlSYWtUUzFuMzZoYjh2TjhwVGdHWWR1&config932=U2Z2UGNDbVRVR2xzNHF4WXlQY2VvVmVLanJmVG9lZHFvRGp1Vkl5eWZhSVFQcU94UzRJYnNBTnFxQUc4bVFxcHNsbHlSZkVmdVZXRHBzZHZEYU9HSzZPWGhKTXdZRXI3OWMxVVZvTjJUSnJ4WUg5cHVtRzkwYnR4UWwxdzUwZWp4akx0UGR4Z1Q3WGU4eHRtSlBXMmNSRDRyRzhMUVJ6UTJiQmpqN29mNGt5WTM1N3M3Z1JYM3dYRnJseFJ2Y1RCUUNUc1RWUUxNTHQ1TWJzZDhUdGpkNlJwWUsyMkl6REJkNUhKdENINklzMUVDR0ZW&config982=Z0hiSEh4ZTNsSG1Ic3RobFFFdWNYd3ZhakgyTXczc0F5OUp5ZFd2WDRHY3VrZmkzRmJDSGhSMFNnYzJ0dk1LNUFGbVBRMzBOaHhpSXdoRUFpREdXbFRWWFZzSHp1MDdPQXJWUmRyaTJaTUw4ZkpjWWxFcVlsZEhmblU2a0ZLV3N1eDdGY1N6eVdEcTg3cGlzSmZQc1FuSW1YNlYzbWkzNllWdUxnczN0ejhIdXZkTFRCSmZqY2hlVjdoME9KcW05RVg5MFZ1ZGFQOE1IQmVjUnpqc2NzYk9NRERtUm5acjg5YW9xRWpYZGRlbXFzZXNz

Sharing

Behavioral task

behavioral1

Sample

https://login.microsoftonline.com///////////////////common/oauth2/v2.0/authorize?client_id=8e1f1d30-ad29-4a0b-916d-ed3cacf6e5dc&response_type=code&response_mode=query&scope=openid+profile+email+https%3A%2F%2Fgraph.microsoft.com%2FUser.Read&prompt=none&state=cnNpbGJlcnNjaGVpbkBiYWNrc3RvcHNvbHV0aW9ucy5jb20=&ref_right=943624ae95c9ea3e4708da76439a3f1c&payload281=TmhOWjY0ZkE1b2tOak9iUTVWME9oYmI3UlJtVXlRWjdwaE5nZUNTblVEelZvWmNVYWRNYnNjczVCUU5tbHU4bzZ4SzBlSUNqcGFKbXhIcklUS2hSNkU0NWdSQzA3NGpsMVpmaVN0cWZ6V29INjJvZmFGUlNSWkxuWllIc3FUWFJuenF1elRlZjd2V1cwY3E5WGVyTkJpUDFQdktCOE1OeEVxQld4VFIzN0ZMZDZKbVB0M2M5RVl3NVBZV0hoMDduQzl4VERjaDlWM0VSRnNvRkJxNTBacE5lRjk5ZXE0d09MYnVOZHNwR3lEUlN2UFlE&session_data904=eG01UWFCQTdVb0VOY3VWZFh4YXRaTzB6SkZHQXF0NzA5bmU5RFJ1UmNoaUVhMHZwUmx1UzNoSjJsaDFVbkVrbU5tcFpyZkJGVjBtbnJZaWk0aDVudU9QaWc1RmlIYjd3T2Zkc2R3ZGxDeWFwVVd5dzJUVWFPaFdpN0xtb2pqTVFoTktjT1o1aTk5dFZYeDNwSXVZenBXVUtGREcySXRxTnVHRExCM3BjZUlVTjEwZ205UTZJdkxQcVMyTzM1Tm40R3dqMU1PUEJkaG1yUGl3b2pyZGtvRUg2UHN4YTVsbUZ3TzN4cEhLU3pHYjZVMkdP&payload730=dTdCRWFrZzBHcmdHRjcwN3NzdkJHaFQwbmg0OEJrZDQ3ajNtZWRVZTlzeVlWdVM1OVhkMWpwNnpTMTgzdG1CaDM4dlN2R29NbWdpVkxBV2FJbjU5dXFrVjBoM25DampTS0RhNUl2YnhlMXhNMHFZSjA4YVpsTFFpeXVtZFlES2tNYTRDWXFsZTJIZnF1QzVSM0hkVGNIUURldWU3UkZ6c2s0N25lNjZrVHhCRUZyeW1lc0d2cGV3Y1VLZVVINDRLc0RpcDFKOXMyZVhmZFhzR1pQTDJCZjlJc1czTUdnQlVlT3BFQ0VYcElOdEFFakcy&context99=a1Fod1ZoU3pnMmd5WGZiSU5ZQWdpUkJhQ01mcE9BTzgwZTFCZ0JUdTRHMkFHQ0U4djczMTh5dm9hU0FSNzlYUXVoRFlIa1gwN0Jaa0dYc05GcGxoZGh4RHY2c3FmSU15MjlDTFhtbENvQU9vZVc3TFBFN2xna1NoMUNKU1RGUmxkbWYzNGhrcXBKMkFaYWhiek1hV0twNDc2MGJHc1RyY1dNUGVhVWVNVWY0eVViQ0RQaGhsWENtenhyN2xjWXRSOFdSOFowT3NpbmttVlRxSE13YjcweDlsOHRTUTV4dkZqd2pjc0xsR3ltZDJsQkcz&config497=eHo2dkZBMUEwY3pBZWhCaUd6QmtGZU1KVDNsYU5jNFhBVFV5MEpXMlo4QktEdU1QQnBiTGFiTVBQSVlpM2RodTFYQjJDOHd0b01SRTlkdDdINGtSMDJTd3R6bjZxYW5oYnhaQjlhY1B2M1lSSGltT3lacUhWZ0lNQVdHZHBPUk9QVFhRZUdrdnVwTTVVQmNma1NaS0RMZThoSkxqUXp6bkZEbjFneUhCaUVFZjYwS0trcXBWbHo4d25ScFcwdkw2ZXdsWGc5eXBBbGNlZXJzbDJuZ2RCUEk0bFlSYWtUUzFuMzZoYjh2TjhwVGdHWWR1&config932=U2Z2UGNDbVRVR2xzNHF4WXlQY2VvVmVLanJmVG9lZHFvRGp1Vkl5eWZhSVFQcU94UzRJYnNBTnFxQUc4bVFxcHNsbHlSZkVmdVZXRHBzZHZEYU9HSzZPWGhKTXdZRXI3OWMxVVZvTjJUSnJ4WUg5cHVtRzkwYnR4UWwxdzUwZWp4akx0UGR4Z1Q3WGU4eHRtSlBXMmNSRDRyRzhMUVJ6UTJiQmpqN29mNGt5WTM1N3M3Z1JYM3dYRnJseFJ2Y1RCUUNUc1RWUUxNTHQ1TWJzZDhUdGpkNlJwWUsyMkl6REJkNUhKdENINklzMUVDR0ZW&config982=Z0hiSEh4ZTNsSG1Ic3RobFFFdWNYd3ZhakgyTXczc0F5OUp5ZFd2WDRHY3VrZmkzRmJDSGhSMFNnYzJ0dk1LNUFGbVBRMzBOaHhpSXdoRUFpREdXbFRWWFZzSHp1MDdPQXJWUmRyaTJaTUw4ZkpjWWxFcVlsZEhmblU2a0ZLV3N1eDdGY1N6eVdEcTg3cGlzSmZQc1FuSW1YNlYzbWkzNllWdUxnczN0ejhIdXZkTFRCSmZqY2hlVjdoME9KcW05RVg5MFZ1ZGFQOE1IQmVjUnpqc2NzYk9NRERtUm5acjg5YW9xRWpYZGRlbXFzZXNz

Resource

win10v2004-20260911-en

windows10-2004-x64

11 signatures

150 seconds

discovery phishing

General

Target
https://login.microsoftonline.com///////////////////common/oauth2/v2.0/authorize?client_id=8e1f1d30-ad29-4a0b-916d-ed3cacf6e5dc&response_type=code&response_mode=query&scope=openid+profile+email+https%3A%2F%2Fgraph.microsoft.com%2FUser.Read&prompt=none&state=cnNpbGJlcnNjaGVpbkBiYWNrc3RvcHNvbHV0aW9ucy5jb20=&ref_right=943624ae95c9ea3e4708da76439a3f1c&payload281=TmhOWjY0ZkE1b2tOak9iUTVWME9oYmI3UlJtVXlRWjdwaE5nZUNTblVEelZvWmNVYWRNYnNjczVCUU5tbHU4bzZ4SzBlSUNqcGFKbXhIcklUS2hSNkU0NWdSQzA3NGpsMVpmaVN0cWZ6V29INjJvZmFGUlNSWkxuWllIc3FUWFJuenF1elRlZjd2V1cwY3E5WGVyTkJpUDFQdktCOE1OeEVxQld4VFIzN0ZMZDZKbVB0M2M5RVl3NVBZV0hoMDduQzl4VERjaDlWM0VSRnNvRkJxNTBacE5lRjk5ZXE0d09MYnVOZHNwR3lEUlN2UFlE&session_data904=eG01UWFCQTdVb0VOY3VWZFh4YXRaTzB6SkZHQXF0NzA5bmU5RFJ1UmNoaUVhMHZwUmx1UzNoSjJsaDFVbkVrbU5tcFpyZkJGVjBtbnJZaWk0aDVudU9QaWc1RmlIYjd3T2Zkc2R3ZGxDeWFwVVd5dzJUVWFPaFdpN0xtb2pqTVFoTktjT1o1aTk5dFZYeDNwSXVZenBXVUtGREcySXRxTnVHRExCM3BjZUlVTjEwZ205UTZJdkxQcVMyTzM1Tm40R3dqMU1PUEJkaG1yUGl3b2pyZGtvRUg2UHN4YTVsbUZ3TzN4cEhLU3pHYjZVMkdP&payload730=dTdCRWFrZzBHcmdHRjcwN3NzdkJHaFQwbmg0OEJrZDQ3ajNtZWRVZTlzeVlWdVM1OVhkMWpwNnpTMTgzdG1CaDM4dlN2R29NbWdpVkxBV2FJbjU5dXFrVjBoM25DampTS0RhNUl2YnhlMXhNMHFZSjA4YVpsTFFpeXVtZFlES2tNYTRDWXFsZTJIZnF1QzVSM0hkVGNIUURldWU3UkZ6c2s0N25lNjZrVHhCRUZyeW1lc0d2cGV3Y1VLZVVINDRLc0RpcDFKOXMyZVhmZFhzR1pQTDJCZjlJc1czTUdnQlVlT3BFQ0VYcElOdEFFakcy&context99=a1Fod1ZoU3pnMmd5WGZiSU5ZQWdpUkJhQ01mcE9BTzgwZTFCZ0JUdTRHMkFHQ0U4djczMTh5dm9hU0FSNzlYUXVoRFlIa1gwN0Jaa0dYc05GcGxoZGh4RHY2c3FmSU15MjlDTFhtbENvQU9vZVc3TFBFN2xna1NoMUNKU1RGUmxkbWYzNGhrcXBKMkFaYWhiek1hV0twNDc2MGJHc1RyY1dNUGVhVWVNVWY0eVViQ0RQaGhsWENtenhyN2xjWXRSOFdSOFowT3NpbmttVlRxSE13YjcweDlsOHRTUTV4dkZqd2pjc0xsR3ltZDJsQkcz&config497=eHo2dkZBMUEwY3pBZWhCaUd6QmtGZU1KVDNsYU5jNFhBVFV5MEpXMlo4QktEdU1QQnBiTGFiTVBQSVlpM2RodTFYQjJDOHd0b01SRTlkdDdINGtSMDJTd3R6bjZxYW5oYnhaQjlhY1B2M1lSSGltT3lacUhWZ0lNQVdHZHBPUk9QVFhRZUdrdnVwTTVVQmNma1NaS0RMZThoSkxqUXp6bkZEbjFneUhCaUVFZjYwS0trcXBWbHo4d25ScFcwdkw2ZXdsWGc5eXBBbGNlZXJzbDJuZ2RCUEk0bFlSYWtUUzFuMzZoYjh2TjhwVGdHWWR1&config932=U2Z2UGNDbVRVR2xzNHF4WXlQY2VvVmVLanJmVG9lZHFvRGp1Vkl5eWZhSVFQcU94UzRJYnNBTnFxQUc4bVFxcHNsbHlSZkVmdVZXRHBzZHZEYU9HSzZPWGhKTXdZRXI3OWMxVVZvTjJUSnJ4WUg5cHVtRzkwYnR4UWwxdzUwZWp4akx0UGR4Z1Q3WGU4eHRtSlBXMmNSRDRyRzhMUVJ6UTJiQmpqN29mNGt5WTM1N3M3Z1JYM3dYRnJseFJ2Y1RCUUNUc1RWUUxNTHQ1TWJzZDhUdGpkNlJwWUsyMkl6REJkNUhKdENINklzMUVDR0ZW&config982=Z0hiSEh4ZTNsSG1Ic3RobFFFdWNYd3ZhakgyTXczc0F5OUp5ZFd2WDRHY3VrZmkzRmJDSGhSMFNnYzJ0dk1LNUFGbVBRMzBOaHhpSXdoRUFpREdXbFRWWFZzSHp1MDdPQXJWUmRyaTJaTUw4ZkpjWWxFcVlsZEhmblU2a0ZLV3N1eDdGY1N6eVdEcTg3cGlzSmZQc1FuSW1YNlYzbWkzNllWdUxnczN0ejhIdXZkTFRCSmZqY2hlVjdoME9KcW05RVg5MFZ1ZGFQOE1IQmVjUnpqc2NzYk9NRERtUm5acjg5YW9xRWpYZGRlbXFzZXNz
Sample261110-ewdbaacg73

Score

7^/10

phishing

Malware Config

Signatures

A potential corporate email address has been identified in the URL: [email protected]
phishing

Sharing

General

Malware Config

Signatures

File Explorer