Static task
static1
Behavioral task
behavioral1
Sample
118078.pdf
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
118078.pdf
Resource
win10v2004-20220812-en
General
-
Target
Invoice 118078 Enclosed.msg
-
Size
149KB
-
MD5
add9bb489712eb621010c4ad97d5357a
-
SHA1
e24a2c4342a2efbefe2e22cc2805d82b886515f3
-
SHA256
bc16879e6bc76f1894c6628e4dbb20e841b21d9a738d214f799d6d5a56381217
-
SHA512
cf6ad2b2d8c187a9a1ec3a24751a195fe24c85490d57bcb4291850d6d7b2478dfe20d526e851d4474287534a86491338ba5d92691a183714875c7ea5af57e202
-
SSDEEP
3072:qpqNadZ2DXfIAmE7OGQU3hWGfxi8hWTNjveshVg+lhAi:0HiXQLvGni8hWTNjvlVg+H
Malware Config
Signatures
Files
-
Invoice 118078 Enclosed.msg.msg
-
https://paylink.paytrace.com/?m=eyJhbGciOiJBMjU2S1ciLCJlbmMiOiJBMTI4R0NNIn0.PQxR6T8DkPvkbk2OlG9lMjAC7Bo3aOZy.NWS3D06ctrAU46jp.YUn7AlyyheoZXWBCkjfzEyuu2umu3XagUkZ5JHH5qAOOUYdFSMLdtW0sk3g0hUwZj44jBO49Yc2yKpVRdfBqxhdY2_35DifNkWQkxLd2c2ITJ8cRYzVlrRPZ2lOb4ph1InZX8ZaurQq7CxSncls32V6LtdjV1IFK3Arw4jGz3bz6jaiZ5wMXj8pMATExFatJrAUlHB1GBFDT2LpWIYXKjVrDza1uOn65TDRtjw6ASNh9F9n9Oo9zDrxYYNM62kU8QydSKXTlDb-BBZ57RPntybJ18QN5-JlXN5A4lA.k0Od9t3I6wa-i2OzO8QmUg&amount=1128.35&amountReadOnly=false&invoice=118078&invoiceReadOnly=false
-
https://paylink.paytrace.com/?m=eyJhbGciOiJBMjU2S1ciLCJlbmMiOiJBMTI4R0NNIn0.PQxR6T8DkPvkbk2OlG9lMjAC7Bo3aOZy.NWS3D06ctrAU46jp.YUn7AlyyheoZXWBCkjfzEyuu2umu3XagUkZ5JHH5qAOOUYdFSMLdtW0sk3g0hUwZj44jBO49Yc2yKpVRdfBqxhdY2_35DifNkWQkxLd2c2ITJ8cRYzVlrRPZ2lOb4ph1InZX8ZaurQq7CxSncls32V6LtdjV1IFK3Arw4jGz3bz6jaiZ5wMXj8pMATExFatJrAUlHB1GBFDT2LpWIYXKjVrDza1uOn65TDRtjw6ASNh9F9n9Oo9zDrxYYNM62kU8QydSKXTlDb-BBZ57RPntybJ18QN5-JlXN5A4lA.k0Od9t3I6wa-i2OzO8QmUg&amountReadOnly=false&invoiceReadOnly=false
-
https://paylink.paytrace.com/?m=eyJhbGciOiJBMjU2S1ciLCJlbmMiOiJBMTI4R0NNIn0.PQxR6T8DkPvkbk2OlG9lMjAC7Bo3aOZy.NWS3D06ctrAU46jp.YUn7AlyyheoZXWBCkjfzEyuu2umu3XagUkZ5JHH5qAOOUYdFSMLdtW0sk3g0hUwZj44jBO49Yc2yKpVRdfBqxhdY2_35DifNkWQkxLd2c2ITJ8cRYzVlrRPZ2lOb4ph1InZX8ZaurQq7CxSncls32V6LtdjV1IFK3Arw4jGz3bz6jaiZ5wMXj8pMATExFatJrAUlHB1GBFDT2LpWIYXKjVrDza1uOn65TDRtjw6ASNh9F9n9Oo9zDrxYYNM62kU8QydSKXTlDb-BBZ57RPntybJ18QN5-JlXN5A4lA.k0Od9t3I6wa-i2OzO8QmUg&amount=1128.35&amountReadOnly=false&invoice=118078&invoiceReadOnly=false
-
https://paylink.paytrace.com/?m=eyJhbGciOiJBMjU2S1ciLCJlbmMiOiJBMTI4R0NNIn0.PQxR6T8DkPvkbk2OlG9lMjAC7Bo3aOZy.NWS3D06ctrAU46jp.YUn7AlyyheoZXWBCkjfzEyuu2umu3XagUkZ5JHH5qAOOUYdFSMLdtW0sk3g0hUwZj44jBO49Yc2yKpVRdfBqxhdY2_35DifNkWQkxLd2c2ITJ8cRYzVlrRPZ2lOb4ph1InZX8ZaurQq7CxSncls32V6LtdjV1IFK3Arw4jGz3bz6jaiZ5wMXj8pMATExFatJrAUlHB1GBFDT2LpWIYXKjVrDza1uOn65TDRtjw6ASNh9F9n9Oo9zDrxYYNM62kU8QydSKXTlDb-BBZ57RPntybJ18QN5-JlXN5A4lA.k0Od9t3I6wa-i2OzO8QmUg&amountReadOnly=false&invoiceReadOnly=false
-
https://planprophet-fsi78731.my.salesforce.com/servlet/servlet.ImageServer?oid=00D4x000004yag4&esid=0184x000009dP0Y&from=ext
-
https://planprophet-fsi78731.my.salesforce.com/servlet/servlet.ImageServer?oid=00D4x000004yag4&esid=0184x000009dP0Y&from=ext
-
https://versionapprovaltsob1-176ce5cb688.secure.force.com/approval/sfc/servlet.shepherd/version/download/0684x00000Kd73mAAB
-
http://sos.texas.gov
-
-
118078.pdf.pdf