General

  • Target

    8a60139c-1e4c-6f10-a2fa-19da2af69d39.eml

  • Size

    915KB

  • MD5

    c7fc9e581abe0f90b172634e60539b15

  • SHA1

    075a2b4b1683c8f58ecc5e611dbe2d52994d440e

  • SHA256

    c7b0f5e3530cdf399be82be797e28f90d2e526d624183da93fd961484e57ad84

  • SHA512

    e85be248b47254f9452f148033d8ce504250580adb1ebe1667feed8fce6447bbd194b4b0c5dfc347839323fabf300b3803251270eab84f8319d0240ae1fee881

  • SSDEEP

    6144:bcPS3EGYMdMqouox4TTq4xGfjuqkIbsjTYjoWpF2Sea0TjSA4I:bcK0GUVuox4nq4xG7ZbGYMWpleau74I

Malware Config

Signatures

  • Office macro that triggers on suspicious action 1 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

Files

  • 8a60139c-1e4c-6f10-a2fa-19da2af69d39.eml
    .eml
    • https://teams.microsoft.com/l/meetup-join/19%3ameeting_MGFmYjQ3ODgtYzlmNy00OGI4LWE3M2YtNjljNDY2YTA0ZDcz%40thread.v2/0?context=%7b%22Tid%22%3a%2263ce7d59-2f3e-42cd-a8cc-be764cff5eb6%22%2c%22Oid%22%3a%228a575db1-4de2-48d0-a8d0-44396dd98e46%22%7d

    • https://www.microsoft.com/en-us/microsoft-teams/download-app

    • https://www.microsoft.com/microsoft-teams/join-a-meeting

    • https://www.webex.com/msteams?confid=1390302464&tenantkey=infosys&domain=m.webex.com

    • https://aka.ms/JoinTeamsMeeting

    • https://teams.microsoft.com/meetingOptions/?organizerId=8a575db1-4de2-48d0-a8d0-44396dd98e46&tenantId=63ce7d59-2f3e-42cd-a8cc-be764cff5eb6&threadId=19_meeting_MGFmYjQ3ODgtYzlmNy00OGI4LWE3M2YtNjljNDY2YTA0ZDcz@thread.v2&messageId=0&language=en-US

  • Gmail.zip
    .zip
  • 0419675272807527999__2023-08-03_1602.doc
    .doc windows office2003

    ThisDocument

    Module1

  • email-html-1.txt
    .html