Static task
static1
Behavioral task
behavioral1
Sample
Potential Phish New 1 Page Fax Received.msg
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
Potential Phish New 1 Page Fax Received.msg
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
Headers.eml
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
Headers.eml
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
Settlement Agreement.html
Resource
win7-20221111-en
Behavioral task
behavioral6
Sample
Settlement Agreement.html
Resource
win10v2004-20220901-en
General
-
Target
Potential Phish New 1 Page Fax Received.msg
-
Size
513KB
-
MD5
f6332c6f01af6eb61cab6ef57c841c6e
-
SHA1
0e9239756dd469007f159fd755f4f119eaa66d8b
-
SHA256
5929b4b3d16a1af6a7b1737f8dd6a8c07a0fe17ab22350c986d76b83c845acdb
-
SHA512
4bdca8b1e63d4b0f93cf532eebb935f312228e7cecf1f6e4da9a105e5e7daa0d022219fd578dbd14f9b322ff7ed06c0b75435ca18e2aaa049554ad3800c783b0
-
SSDEEP
6144:ESFb5ZvKN0uVSllsnzrsQSvh0l8tRctjqDT6t1KNTBnpgDJD/G0W6ILaj7QAtP:bb5ZU0uVSQs3vhEtjqCG3pa/G6uw7z
Malware Config
Signatures
Files
-
Potential Phish New 1 Page Fax Received.msg.msg
-
http://.sonha-te.pt/<EMAIL64>
-
http://1e100.net
-
http://BL0GCC02FT013.eop-gcc02.prod.protection.outlook.com
-
http://BL0GCC02FT013.mail.protection.outlook.com
-
http://BL0PR0901CA0012.namprd09.prod.outlook.com
-
http://BL0PR0901CA0012.outlook.office365.com
-
http://DM6PR09MB5816.namprd09.prod.outlook.com
-
http://SA0PR09MB6202.namprd09.prod.outlook.com
-
http://mail-wm1-f97.google.com
-
http://muskokalumber.ca
-
http://mx.google.com
-
http://protection.outlook.com
-
http://scfo.texas.gov
-
http://smtp-relay.gmail.com
- Show all
-
-
9865695.png.png
-
Headers.txt.eml
-
Settlement Agreement.html.html .js