Static task
static1
Behavioral task
behavioral1
Sample
First American Title has sent you a secure message. .msg
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
First American Title has sent you a secure message. .msg
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
image001.png
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
image001.png
Resource
win10v2004-20221111-en
Behavioral task
behavioral5
Sample
image002.png
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
image002.png
Resource
win10v2004-20221111-en
General
-
Target
First American Title has sent you a secure message. .msg
-
Size
142KB
-
MD5
5d97b545e2889ebef09dad93dd7bd094
-
SHA1
bc04ecd48595cc403bcf7e986b56cf2632c6a337
-
SHA256
716a0d426c5d38ea46ef1de437344995e9b1c2414670f43fb34a4d3bd3fe6846
-
SHA512
4be476f6d25033986deba11e3bb4500bd7eb1b81ab2b99583d25a9be5300c88b7c853aba726202b93907824117a341a454e42629fbbdd500aaffc6ac796de169
-
SSDEEP
1536:AXhTRV8d/AfW7taHSGbaVA6KqgyjfbNvrkf74WNWBbl+f6Vqgl66cR5rTCz182JR:uqd/822IGyjf2fml+fsmR5HCz1Jki
Malware Config
Signatures
Files
-
First American Title has sent you a secure message. .msg.msg
-
http://www.loandepot.com/about/contactus
-
https://faclosingdoc.xyz
-
https://firstamerican-office.site
-
https://faclosingdoc.xyz/
-
https://registration.firstam.com/creativeservices/COVID-19/emailsignature/Covid-19-EmailSignature.png
-
https://www.alta.org/media/pdf/alta-wire-fraud-infographic.pdf
-
http://span.ms
-
-
image001.png.png
-
image002.png.png