Static task
static1
Behavioral task
behavioral1
Sample
New locations + changes.msg
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
New locations + changes.msg
Resource
win10v2004-20220812-en
General
-
Target
New locations + changes.msg
-
Size
63KB
-
MD5
589fa62da9cdd2fd23600264608209d5
-
SHA1
915d1568ac6561e0b4d0750ec07c5abe138f6cf8
-
SHA256
cb7072a0c5e1996dca35e0e132fcfc1c5b3410dbf03662836491cc27caf7624e
-
SHA512
4c5eb90ea4062b09d4c8482efbd1a4ff5c432ab21d550993c1e1c5d7c274222bf55c4beb8175af4ee9775c0b05ca122d9bbc1a9641b1d017ba422a293c51ec5c
-
SSDEEP
1536:+BfeChgvphQng+AbsxbwdCAweBzs/ysXTn/KY:D0gvphQng+AbsxbwdCAwelsZDnB
Malware Config
Signatures
Files
-
New locations + changes.msg.msg
-
http://.title.no
-
http://Proxy-seller.com
-
https://proxy-seller.com/bitrix/tools/track_mail_click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiIxMzAzNjc2MiJ9&url=https%3A%2F%2Fproxy-seller.com%2F%3Futm_source%3Demail%26amp%3Butm_medium%3Demail%26amp%3Butm_campaign%3Dfeedback%26bx_sender_conversion_id%3D13036762%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dindianromaniamobiles&sign=5436785d2817cdd10a10557875cc0d695a3a50ebe43b026d159e1d826afd87bd
-
https://proxy-seller.com/bitrix/tools/track_mail_click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiIxMzAzNjc2MiJ9&url=https%3A%2F%2Fproxy-seller.com%2Farmenia-proxy%2F%3Fbx_sender_conversion_id%3D13036762%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dindianromaniamobiles&sign=67dd9b53e65b2dff538e593a6c79f85e6b9cb7a4c16789e83885dc28cd89ca9c
-
https://proxy-seller.com/bitrix/tools/track_mail_click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiIxMzAzNjc2MiJ9&url=https%3A%2F%2Fproxy-seller.com%2Fbitrix%2Ftools%2Ftrack_mail_unsub.php%3Ftag%3Dsender.eyJSRUNJUElFTlRfSUQiOiIxMzAzNjc2MiIsIkNPTlRBQ1RfSUQiOiIyNjE3ODciLCJNQUlMSU5HX0lEIjoiMiIsIkVNQUlMIjoiaW5mb0BicmlkZ2VnYXBnbG9iYWwuY29tIiwiQ09ERSI6ImluZm9AYnJpZGdlZ2FwZ2xvYmFsLmNvbSIsIlRFU1QiOiJOIn0%253D.70f8de382a833fe0156e6c400bfac080a7f956bebc382601e36cad913cc1dd4e%26bx_sender_conversion_id%3D13036762%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dindianromaniamobiles&sign=299fdd1b8d44e883fbe292234bf1ab1d862ebb7262c769bd964a0dd3709a6b38
-
https://proxy-seller.com/bitrix/tools/track_mail_click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiIxMzAzNjc2MiJ9&url=https%3A%2F%2Fproxy-seller.com%2Fbosnia-and-herzegovina-proxy%2F%3Fbx_sender_conversion_id%3D13036762%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dindianromaniamobiles&sign=75cf507682210178df79d507209c4ff63654c166ee2c74ca737093a2ed18840c
-
https://proxy-seller.com/bitrix/tools/track_mail_click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiIxMzAzNjc2MiJ9&url=https%3A%2F%2Fproxy-seller.com%2Fcontacts%2F%3Fskype%26bx_sender_conversion_id%3D13036762%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dindianromaniamobiles&sign=5474b931cd6eb90a7328ef6adf04a005bc2c3d964cb68c4c9865462dabee2124
-
https://proxy-seller.com/bitrix/tools/track_mail_click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiIxMzAzNjc2MiJ9&url=https%3A%2F%2Fproxy-seller.com%2Fgreece-proxy%2F%3Fbx_sender_conversion_id%3D13036762%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dindianromaniamobiles&sign=321bcdafac0e28b6d4255ee2108f125bfdbd8aafe94a37b2725182659fb83745
-
https://proxy-seller.com/bitrix/tools/track_mail_click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiIxMzAzNjc2MiJ9&url=https%3A%2F%2Fproxy-seller.com%2Fipv6%2F%3Fregion%3D1292%26bx_sender_conversion_id%3D13036762%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dindianromaniamobiles&sign=0addc27a7e9ad9487a9e2962db89dc6cc4c55a08204861e78e484f0ddf6febee
-
https://proxy-seller.com/bitrix/tools/track_mail_click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiIxMzAzNjc2MiJ9&url=https%3A%2F%2Fproxy-seller.com%2Fipv6%2F%3Fregion%3D3910%26bx_sender_conversion_id%3D13036762%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dindianromaniamobiles&sign=af1d8310c1e310090d5ffdf553d05e83c31f131f6cf2b97a39a510a36ef7fc47
-
https://proxy-seller.com/bitrix/tools/track_mail_click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiIxMzAzNjc2MiJ9&url=https%3A%2F%2Fproxy-seller.com%2Fipv6%2F%3Fregion%3D4432%26bx_sender_conversion_id%3D13036762%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dindianromaniamobiles&sign=68a8c2f781eb3102df4bbc5349b2417aeba24636f4283677385ef59da134ff80
-
https://proxy-seller.com/bitrix/tools/track_mail_click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiIxMzAzNjc2MiJ9&url=https%3A%2F%2Fproxy-seller.com%2Fipv6%2F%3Fregion%3D4433%26bx_sender_conversion_id%3D13036762%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dindianromaniamobiles&sign=ffe2793d6299a7ee31619c22ac1bf36c0ef7194b44fbd332a52cc90fc1dce187
-
https://proxy-seller.com/bitrix/tools/track_mail_click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiIxMzAzNjc2MiJ9&url=https%3A%2F%2Fproxy-seller.com%2Fipv6%2F%3Fregion%3D4477%26bx_sender_conversion_id%3D13036762%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dindianromaniamobiles&sign=89cd459d93a51451d3feb61da66e23fc7c1fb3fc5d262027bc36fa161bf99952
-
https://proxy-seller.com/bitrix/tools/track_mail_click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiIxMzAzNjc2MiJ9&url=https%3A%2F%2Fproxy-seller.com%2Fisp%2F%3Fregion%3D4479%26bx_sender_conversion_id%3D13036762%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dindianromaniamobiles&sign=7585afb645a5ae112471739ef32c3c2958f5423ce766c5ee76f512e56b1ecc9f
-
https://proxy-seller.com/bitrix/tools/track_mail_click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiIxMzAzNjc2MiJ9&url=https%3A%2F%2Fproxy-seller.com%2Fisp%2F%3Fregion%3D4480%26bx_sender_conversion_id%3D13036762%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dindianromaniamobiles&sign=a925e8af207b91ba031bc6000b7a9fbf188040c129cf4ba0d9e5be1a6247882b
-
https://proxy-seller.com/bitrix/tools/track_mail_click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiIxMzAzNjc2MiJ9&url=https%3A%2F%2Fproxy-seller.com%2Fmalta-proxy%2F%3Fbx_sender_conversion_id%3D13036762%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dindianromaniamobiles&sign=3d8e1dd792d80bd1fa5c9047756c6f20c25383aba55426275f5a1402b3343d87
-
https://proxy-seller.com/bitrix/tools/track_mail_click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiIxMzAzNjc2MiJ9&url=https%3A%2F%2Fproxy-seller.com%2Fuae-proxy%2F%3Fbx_sender_conversion_id%3D13036762%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dindianromaniamobiles&sign=177a1ae0f34b9682670d81f12bda348daa48eba2423411ed8f0120e8565adde6
-
https://proxy-seller.com/bitrix/tools/track_mail_click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiIxMzAzNjc2MiJ9&url=https%3A%2F%2Ft.me%2Fproxy_seller%3Fbx_sender_conversion_id%3D13036762%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dindianromaniamobiles&sign=be81ddc8b27562c304be577b0587b28be32be64ff34514467a63c9dd8bfde29f
-
https://proxy-seller.com/bitrix/tools/track_mail_click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiIxMzAzNjc2MiJ9&url=https%3A%2F%2Ft.me%2Fproxyseller_com%3Fbx_sender_conversion_id%3D13036762%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dindianromaniamobiles&sign=4def2441e733c82727946ad0e2a90e1ee87049f384b996a989dc4c7a6644cc20
-
https://proxy-seller.com/bitrix/tools/track_mail_click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiIxMzAzNjc2MiJ9&url=https%3A%2F%2Fwww.facebook.com%2Fsellerproxy%2F%3Fbx_sender_conversion_id%3D13036762%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dindianromaniamobiles&sign=e31fdf4d893f2f6891e99ae5aafffd2721e6d42f667f4b3c32c290a4ccb61d19
-
https://proxy-seller.com/bitrix/tools/track_mail_click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiIxMzAzNjc2MiJ9&url=https%3A%2F%2Fwww.youtube.com%2Fchannel%2FUC93BysELhgDHyOZJuNdluxA%3Fbx_sender_conversion_id%3D13036762%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dindianromaniamobiles&sign=4d2f39234da5450e0630aaabc0393676ca8bf592887ec60719a9182f14455f65
-
https://proxy-seller.com/bitrix/tools/track_mail_click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiIxMzAzNjc2MiJ9&url=https%3A%2F%2Fproxy-seller.com%2F%3Futm_source%3Demail%26amp%3Butm_medium%3Demail%26amp%3Butm_campaign%3Dfeedback%26bx_sender_conversion_id%3D13036762%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dindianromaniamobiles&sign=5436785d2817cdd10a10557875cc0d695a3a50ebe43b026d159e1d826afd87bd
-
https://proxy-seller.com/bitrix/tools/track_mail_click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiIxMzAzNjc2MiJ9&url=https%3A%2F%2Fproxy-seller.com%2Farmenia-proxy%2F%3Fbx_sender_conversion_id%3D13036762%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dindianromaniamobiles&sign=67dd9b53e65b2dff538e593a6c79f85e6b9cb7a4c16789e83885dc28cd89ca9c
-
https://proxy-seller.com/bitrix/tools/track_mail_click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiIxMzAzNjc2MiJ9&url=https%3A%2F%2Fproxy-seller.com%2Fbitrix%2Ftools%2Ftrack_mail_unsub.php%3Ftag%3Dsender.eyJSRUNJUElFTlRfSUQiOiIxMzAzNjc2MiIsIkNPTlRBQ1RfSUQiOiIyNjE3ODciLCJNQUlMSU5HX0lEIjoiMiIsIkVNQUlMIjoiaW5mb0BicmlkZ2VnYXBnbG9iYWwuY29tIiwiQ09ERSI6ImluZm9AYnJpZGdlZ2FwZ2xvYmFsLmNvbSIsIlRFU1QiOiJOIn0%253D.70f8de382a833fe0156e6c400bfac080a7f956bebc382601e36cad913cc1dd4e%26bx_sender_conversion_id%3D13036762%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dindianromaniamobiles&sign=299fdd1b8d44e883fbe292234bf1ab1d862ebb7262c769bd964a0dd3709a6b38
-
https://proxy-seller.com/bitrix/tools/track_mail_click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiIxMzAzNjc2MiJ9&url=https%3A%2F%2Fproxy-seller.com%2Fbosnia-and-herzegovina-proxy%2F%3Fbx_sender_conversion_id%3D13036762%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dindianromaniamobiles&sign=75cf507682210178df79d507209c4ff63654c166ee2c74ca737093a2ed18840c
-
https://proxy-seller.com/bitrix/tools/track_mail_click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiIxMzAzNjc2MiJ9&url=https%3A%2F%2Fproxy-seller.com%2Fcontacts%2F%3Fskype%26bx_sender_conversion_id%3D13036762%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dindianromaniamobiles&sign=5474b931cd6eb90a7328ef6adf04a005bc2c3d964cb68c4c9865462dabee2124
-
https://proxy-seller.com/bitrix/tools/track_mail_click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiIxMzAzNjc2MiJ9&url=https%3A%2F%2Fproxy-seller.com%2Fgreece-proxy%2F%3Fbx_sender_conversion_id%3D13036762%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dindianromaniamobiles&sign=321bcdafac0e28b6d4255ee2108f125bfdbd8aafe94a37b2725182659fb83745
-
https://proxy-seller.com/bitrix/tools/track_mail_click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiIxMzAzNjc2MiJ9&url=https%3A%2F%2Fproxy-seller.com%2Fipv6%2F%3Fregion%3D1292%26bx_sender_conversion_id%3D13036762%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dindianromaniamobiles&sign=0addc27a7e9ad9487a9e2962db89dc6cc4c55a08204861e78e484f0ddf6febee
-
https://proxy-seller.com/bitrix/tools/track_mail_click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiIxMzAzNjc2MiJ9&url=https%3A%2F%2Fproxy-seller.com%2Fipv6%2F%3Fregion%3D3910%26bx_sender_conversion_id%3D13036762%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dindianromaniamobiles&sign=af1d8310c1e310090d5ffdf553d05e83c31f131f6cf2b97a39a510a36ef7fc47
-
https://proxy-seller.com/bitrix/tools/track_mail_click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiIxMzAzNjc2MiJ9&url=https%3A%2F%2Fproxy-seller.com%2Fipv6%2F%3Fregion%3D4432%26bx_sender_conversion_id%3D13036762%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dindianromaniamobiles&sign=68a8c2f781eb3102df4bbc5349b2417aeba24636f4283677385ef59da134ff80
-
https://proxy-seller.com/bitrix/tools/track_mail_click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiIxMzAzNjc2MiJ9&url=https%3A%2F%2Fproxy-seller.com%2Fipv6%2F%3Fregion%3D4433%26bx_sender_conversion_id%3D13036762%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dindianromaniamobiles&sign=ffe2793d6299a7ee31619c22ac1bf36c0ef7194b44fbd332a52cc90fc1dce187
-
https://proxy-seller.com/bitrix/tools/track_mail_click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiIxMzAzNjc2MiJ9&url=https%3A%2F%2Fproxy-seller.com%2Fipv6%2F%3Fregion%3D4477%26bx_sender_conversion_id%3D13036762%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dindianromaniamobiles&sign=89cd459d93a51451d3feb61da66e23fc7c1fb3fc5d262027bc36fa161bf99952
-
https://proxy-seller.com/bitrix/tools/track_mail_click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiIxMzAzNjc2MiJ9&url=https%3A%2F%2Fproxy-seller.com%2Fisp%2F%3Fregion%3D4479%26bx_sender_conversion_id%3D13036762%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dindianromaniamobiles&sign=7585afb645a5ae112471739ef32c3c2958f5423ce766c5ee76f512e56b1ecc9f
-
https://proxy-seller.com/bitrix/tools/track_mail_click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiIxMzAzNjc2MiJ9&url=https%3A%2F%2Fproxy-seller.com%2Fisp%2F%3Fregion%3D4480%26bx_sender_conversion_id%3D13036762%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dindianromaniamobiles&sign=a925e8af207b91ba031bc6000b7a9fbf188040c129cf4ba0d9e5be1a6247882b
-
https://proxy-seller.com/bitrix/tools/track_mail_click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiIxMzAzNjc2MiJ9&url=https%3A%2F%2Fproxy-seller.com%2Fmalta-proxy%2F%3Fbx_sender_conversion_id%3D13036762%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dindianromaniamobiles&sign=3d8e1dd792d80bd1fa5c9047756c6f20c25383aba55426275f5a1402b3343d87
-
https://proxy-seller.com/bitrix/tools/track_mail_click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiIxMzAzNjc2MiJ9&url=https%3A%2F%2Fproxy-seller.com%2Fuae-proxy%2F%3Fbx_sender_conversion_id%3D13036762%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dindianromaniamobiles&sign=177a1ae0f34b9682670d81f12bda348daa48eba2423411ed8f0120e8565adde6
-
https://proxy-seller.com/bitrix/tools/track_mail_click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiIxMzAzNjc2MiJ9&url=https%3A%2F%2Ft.me%2Fproxy_seller%3Fbx_sender_conversion_id%3D13036762%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dindianromaniamobiles&sign=be81ddc8b27562c304be577b0587b28be32be64ff34514467a63c9dd8bfde29f
-
https://proxy-seller.com/bitrix/tools/track_mail_click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiIxMzAzNjc2MiJ9&url=https%3A%2F%2Ft.me%2Fproxyseller_com%3Fbx_sender_conversion_id%3D13036762%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dindianromaniamobiles&sign=4def2441e733c82727946ad0e2a90e1ee87049f384b996a989dc4c7a6644cc20
-
https://proxy-seller.com/bitrix/tools/track_mail_click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiIxMzAzNjc2MiJ9&url=https%3A%2F%2Fwww.facebook.com%2Fsellerproxy%2F%3Fbx_sender_conversion_id%3D13036762%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dindianromaniamobiles&sign=e31fdf4d893f2f6891e99ae5aafffd2721e6d42f667f4b3c32c290a4ccb61d19
-
https://proxy-seller.com/bitrix/tools/track_mail_click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiIxMzAzNjc2MiJ9&url=https%3A%2F%2Fwww.youtube.com%2Fchannel%2FUC93BysELhgDHyOZJuNdluxA%3Fbx_sender_conversion_id%3D13036762%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dindianromaniamobiles&sign=4d2f39234da5450e0630aaabc0393676ca8bf592887ec60719a9182f14455f65
-
https://proxy-seller.com/bitrix/tools/track_mail_read.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiIxMzAzNjc2MiJ9
-
https://proxy-seller.com/local/templates/dvsproxyseller/img/send_mail/header-logo.png
-
https://proxy-seller.com/upload/medialibrary/445/lpp0wy5vq2w6ww07kktqcp1rnc2gxer9.png
-
https://proxy-seller.com/upload/medialibrary/56d/84z7bawp9mzbwywjqgtq53sjzqw5rsdw.png
-
https://proxy-seller.com/upload/medialibrary/cc1/dfmi2lzii23roqwlhxqlspd8sdmirc3h.png
-
https://proxy-seller.com/upload/medialibrary/d13/t050kohqo9i2wkzc0r2w434c149hvrq6.png
-
https://proxy-seller.com/upload/medialibrary/ec2/94wdri8wfm9nn1ed5azd24cag0inerm6.png
-
http://proxy-seller.com
- Show all
-