Static task
static1
Behavioral task
behavioral1
Sample
OB payment plan.msg
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
OB payment plan.msg
Resource
win10v2004-20220812-en
General
-
Target
OB payment plan.msg
-
Size
75KB
-
MD5
0e8a02a16ecf95754cd77cad37fcde56
-
SHA1
b4901aa80461cbe513e803e076f217d48f4f302d
-
SHA256
0af73c8d4ea672cb71ba3f56c159226c3abe77f941e237bf2fd33e7abbe9a687
-
SHA512
877043b95b61789b6a5284d3fa31167de39a0d7d20f22ea8c8a8ac0e6e1c23231df3d19d53a1b60cc017459b0e6ef036c9bc4036904a114c501e448082e94e4d
-
SSDEEP
1536:nLKOQkaF16LViq5bW+W1HxjCK8OPNnSFdbi:OOQB167wxjCuubi
Malware Config
Signatures
Files
-
OB payment plan.msg.msg
-
http://www.northlakeobgyn.com
-
https://www.phreesia.net/25/Phreesia.PatientAnnouncements.Unsubscribe.Web/Announcement.aspx/UnsubscribePatientEmail?serviceCode=1&patientEmailRecordId=38f25da7-621e-4262-a4f2-3c32047a35e3&mailingLogRecordGuid=df55b851-9971-408a-950c-196494ed5cb0&communicationTrackingGuid=38b4636e-c00d-4e74-8118-beb437a9e216
-
https://www.phreesia.net/25/Phreesia.PatientAnnouncements.Unsubscribe.Web/Announcement.aspx/UnsubscribePatientEmail?serviceCode=1&patientEmailRecordId=38f25da7-621e-4262-a4f2-3c32047a35e3&mailingLogRecordGuid=df55b851-9971-408a-950c-196494ed5cb0&communicationTrackingGuid=38b4636e-c00d-4e74-8118-beb437a9e216
-
https://z1-sns.phreesia.net/25/tracking/api/tracking/open?emailId=38f25da7-621e-4262-a4f2-3c32047a35e3&communicationTrackingGuid=38b4636e-c00d-4e74-8118-beb437a9e216&imageUrl=https://z1-sns.phreesia.net/25/tracking/content/spacer.gif&ignoreLogging=false
-
https://z1-sns.phreesia.net/25/tracking/api/tracking/open?emailId=38f25da7-621e-4262-a4f2-3c32047a35e3&communicationTrackingGuid=38b4636e-c00d-4e74-8118-beb437a9e216&imageUrl=https://z1-sns.phreesia.net/25/tracking/content/spacer.gif&ignoreLogging=false
-
https://z1-sns.phreesia.net/25/tracking/content/website_light.png
-
http://table.menu
-