General

  • Target

    New locations + changes.msg

  • Size

    63KB

  • MD5

    589fa62da9cdd2fd23600264608209d5

  • SHA1

    915d1568ac6561e0b4d0750ec07c5abe138f6cf8

  • SHA256

    cb7072a0c5e1996dca35e0e132fcfc1c5b3410dbf03662836491cc27caf7624e

  • SHA512

    4c5eb90ea4062b09d4c8482efbd1a4ff5c432ab21d550993c1e1c5d7c274222bf55c4beb8175af4ee9775c0b05ca122d9bbc1a9641b1d017ba422a293c51ec5c

  • SSDEEP

    1536:+BfeChgvphQng+AbsxbwdCAweBzs/ysXTn/KY:D0gvphQng+AbsxbwdCAwelsZDnB

Score
1/10

Malware Config

Signatures

Files

  • New locations + changes.msg
    .msg
    • http://.title.no

    • http://Proxy-seller.com

    • https://proxy-seller.com/bitrix/tools/track_mail_click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiIxMzAzNjc2MiJ9&url=https%3A%2F%2Fproxy-seller.com%2F%3Futm_source%3Demail%26amp%3Butm_medium%3Demail%26amp%3Butm_campaign%3Dfeedback%26bx_sender_conversion_id%3D13036762%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dindianromaniamobiles&sign=5436785d2817cdd10a10557875cc0d695a3a50ebe43b026d159e1d826afd87bd

    • https://proxy-seller.com/bitrix/tools/track_mail_click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiIxMzAzNjc2MiJ9&url=https%3A%2F%2Fproxy-seller.com%2Farmenia-proxy%2F%3Fbx_sender_conversion_id%3D13036762%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dindianromaniamobiles&sign=67dd9b53e65b2dff538e593a6c79f85e6b9cb7a4c16789e83885dc28cd89ca9c

    • https://proxy-seller.com/bitrix/tools/track_mail_click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiIxMzAzNjc2MiJ9&url=https%3A%2F%2Fproxy-seller.com%2Fbitrix%2Ftools%2Ftrack_mail_unsub.php%3Ftag%3Dsender.eyJSRUNJUElFTlRfSUQiOiIxMzAzNjc2MiIsIkNPTlRBQ1RfSUQiOiIyNjE3ODciLCJNQUlMSU5HX0lEIjoiMiIsIkVNQUlMIjoiaW5mb0BicmlkZ2VnYXBnbG9iYWwuY29tIiwiQ09ERSI6ImluZm9AYnJpZGdlZ2FwZ2xvYmFsLmNvbSIsIlRFU1QiOiJOIn0%253D.70f8de382a833fe0156e6c400bfac080a7f956bebc382601e36cad913cc1dd4e%26bx_sender_conversion_id%3D13036762%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dindianromaniamobiles&sign=299fdd1b8d44e883fbe292234bf1ab1d862ebb7262c769bd964a0dd3709a6b38

    • https://proxy-seller.com/bitrix/tools/track_mail_click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiIxMzAzNjc2MiJ9&url=https%3A%2F%2Fproxy-seller.com%2Fbosnia-and-herzegovina-proxy%2F%3Fbx_sender_conversion_id%3D13036762%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dindianromaniamobiles&sign=75cf507682210178df79d507209c4ff63654c166ee2c74ca737093a2ed18840c

    • https://proxy-seller.com/bitrix/tools/track_mail_click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiIxMzAzNjc2MiJ9&url=https%3A%2F%2Fproxy-seller.com%2Fcontacts%2F%3Fskype%26bx_sender_conversion_id%3D13036762%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dindianromaniamobiles&sign=5474b931cd6eb90a7328ef6adf04a005bc2c3d964cb68c4c9865462dabee2124

    • https://proxy-seller.com/bitrix/tools/track_mail_click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiIxMzAzNjc2MiJ9&url=https%3A%2F%2Fproxy-seller.com%2Fgreece-proxy%2F%3Fbx_sender_conversion_id%3D13036762%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dindianromaniamobiles&sign=321bcdafac0e28b6d4255ee2108f125bfdbd8aafe94a37b2725182659fb83745

    • https://proxy-seller.com/bitrix/tools/track_mail_click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiIxMzAzNjc2MiJ9&url=https%3A%2F%2Fproxy-seller.com%2Fipv6%2F%3Fregion%3D1292%26bx_sender_conversion_id%3D13036762%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dindianromaniamobiles&sign=0addc27a7e9ad9487a9e2962db89dc6cc4c55a08204861e78e484f0ddf6febee

    • Show all