General

  • Target

    FW INC000094870282 Offense #122447 FireEye Retroactive alert detection.msg

  • Size

    441KB

  • MD5

    fcf5fd51d614707dbfe26595fd918a0e

  • SHA1

    20179ba3a714229e3035cfc9bd04fe5d3bc0cd98

  • SHA256

    944a6318ccbba152a18069c6517bb5d95355c64844eca03a58c20f7dcdbed7e8

  • SHA512

    e524bd05b9ec179c9a04322c9feaf3ea17bbec7259f12d65efdb93c1135bc7c37c61f097c07e6cead64afd4edeb64bc52e58960514e1bce42171011274bd6e7c

  • SSDEEP

    6144:4R7MJiewwFoVhKul7f5oXy/N/FDDs1WDiYqdfddmP0A/NLSigxB4LD4HZ:45AiTGEDDsCof

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • FW INC000094870282 Offense #122447 FireEye Retroactive alert detection.msg
    .msg
    • http://depl.co.in

    • https://protect2.fireeye.com/v1/url?k=15f3a7c1-4a689d13-15f4fc35-000babe405e0-4f32dc2a020944d7&q=1&e=e2a3c057-b715-4f2e-b629-e1ceb536989b&u=http%3A%2F%2Fwww.depl.co.in%2F

    • http://www.depl.co.in/

    • https://protect2.fireeye.com/v1/url?k=238b66ca-7c105c18-238c3d3e-000babe405e0-f14cf7bf657e6654&q=1&e=e2a3c057-b715-4f2e-b629-e1ceb536989b&u=http%3A%2F%2Fwww.depl.co.in%2F

    • https://protect2.fireeye.com/v1/url?k=31ec3655-6e770c87-31eb6da1-000babe405e0-d0b6add68daf6377&q=1&e=e2a3c057-b715-4f2e-b629-e1ceb536989b&u=http%3A%2F%2Fwww.depl.co.in%2F

    • https://protect2.fireeye.com/v1/url?k=3cc19275-635aa8a7-3cc6c981-000babe405e0-f87dde5ae58ebf3e&q=1&e=e2a3c057-b715-4f2e-b629-e1ceb536989b&u=http%3A%2F%2Fwww.depl.co.in%2F

    • https://protect2.fireeye.com/v1/url?k=51844fed-0e1f753f-51831419-000babe405e0-e8a08f61dd0b5c97&q=1&e=81512247-57f8-4701-9105-c9b3ad4a45ee&u=http%3A%2F%2Fwww.depl.co.in%2F

    • https://protect2.fireeye.com/v1/url?k=6eb56860-312e52b2-6eb23394-000babe405e0-13e2e7275665f53b&q=1&e=e2a3c057-b715-4f2e-b629-e1ceb536989b&u=http%3A%2F%2Fwww.depl.co.in%2F

    • https://protect2.fireeye.com/v1/url?k=989bbdb0-c7008762-989ce644-000babe405e0-d55509e72228f739&q=1&e=e2a3c057-b715-4f2e-b629-e1ceb536989b&u=http%3A%2F%2Fwww.depl.co.in%2F

    • Show all
  • Attn_88334209_12222022.pdf
    .pdf
    • http://rxp.com/blog/Attn_XXXXXX_12222022.zip