Microsoft Tech Support Kit 0589be7

A Microsoft Tech support kit containing an audio file used across many different domains. As well as a JS function that is used to get the phone number from the URL parameters.

References

IOK Rule (edit) 

title: Microsoft Tech Support Kit 0589be7
description: |
  A Microsoft Tech support kit containing an audio file used across many different domains.
  As well as a JS function that is used to get the phone number from the URL parameters.
references:
  - https://urlscan.io/search/#hash%3A0589be7715d2320e559eae6bd26f3528e97450c70293da2e1e8ce45f77f99ab1
  - https://urlscan.io/result/810e4051-a6bf-4853-808b-8cb9283a36fe
  
detection:

  audioFileName:
    js|contains: 'wa0lDErtm0s.mp3'
    
  otherAudioFileName:
    html|contains: '0wa0rni0ng0.mp3'
    
  getPhoneNumberFunction:
    html|contains: "getVariableFromURl('phone');"
    
  condition: (audioFileName and getPhoneNumberFunction) or (otherAudioFileName and getPhoneNumberFunction)
  
tags:
  - target.microsoft