Overview

overview

3

Static

static

1

message_v2.rpmsg

windows7-x64

3

message_v2.rpmsg

windows10-2004-x64

3

Resubmissions

01/03/2023, 18:52

230301-xh78lshf73 3

Sharing

Copy URL Twitter E-mail

General

  • Target

    FW_ Incoming Document From NCR Corporation .msg

  • Size

    414KB

  • MD5

    45cece642ad3496b1e8fc9f2fc874589

  • SHA1

    1583b89961041e4ad0ca921989e9e5c191031543

  • SHA256

    c114b7051944e9590608dc4acd2176217a64befb2c01ccd8fafba2e7ed6d5894

  • SHA512

    29088734f7dadea2a0994d7fcd4dfe463af3f092574ad0e5c2d8500a44b15e14f762937fe22208f45220fa56e4aeab2db0c0bb60e326095e00241c518e7fccf3

  • SSDEEP

    6144:lu5Wu5Y62MxO162OdpUGm3S9duCe2EFfAUkFL5P8ajEldPjNisNc8ZsDD/n9ZRi:JMxUjM7JnX5EcEldtlZADlZA

Score
1/10

Malware Config

Signatures

Files

  • FW_ Incoming Document From NCR Corporation .msg
    .msg

    • https://go.microsoft.com/fwlink/?Linkid=844050

    • https://go.microsoft.com/fwlink/p/?linkid=857875

    • https://outlook.office365.com/Encryption/lock.png

    • https://outlook.office365.com/owa/?viewmodel=ReadMessageItem&InternetMessageID=%3cBYAPR15MB3477FBDA94C15C73C43E2763E4AB9%40BYAPR15MB3477.namprd15.prod.outlook.com%3e

    • https://outlook.office365.com/owa/?viewmodel=ReadMessageItem&InternetMessageID=%3cBYAPR15MB3477FBDA94C15C73C43E2763E4AB9%40BYAPR15MB3477.namprd15.prod.outlook.com%3e

    • http://ncr.com

  • message_v2.rpmsg