Static task
static1
Behavioral task
behavioral1
Sample
Purchase Order (18.0 KB).msg
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Purchase Order (18.0 KB).msg
Resource
win10v2004-20230220-en
General
-
Target
Purchase Order (18.0 KB).msg
-
Size
47KB
-
MD5
48d89249d5c8d85e1e9e7df232dc45a6
-
SHA1
b5fa293eae4bfd526f12897f7ff0e8b1829c96fe
-
SHA256
7787e1a9df91319ac94d509e3e4cb106333ab96999b86d3cad126e48c2509368
-
SHA512
2bf217173c053830029898a9114922b5733a09fa7869f96962005411b04f94ef04886b38cfd6a2e10d60baca46d58c99f90f742f71c5717e4fd120cb78e752d1
-
SSDEEP
768:oOYeiwt1tN2Di6RbmGsWb/m/a6bjlgJK1A79nhYkRG3rKB:T10m/RbjCT7gGG3W
Malware Config
Signatures
Files
-
Purchase Order (18.0 KB).msg.msg
-
http://americanfreight.us
-
https://attachments.office.net/owa/swright1%40americanfreight.us/service.svc/s/GetAttachmentThumbnail?id=AAMkADgzMmY0NWU3LWE5NTMtNDkwNC05NmVlLTA3NjcyNDQwNmE0OQBGAAAAAAABH%2BAvUSlpSqKn4aZzMw9tBwBDa8DLOZFUQ7P4Q5vCcGJjAAAAAAEJAABDa8DLOZFUQ7P4Q5vCcGJjAADbb6YfAAABEgAQAArJKuAYcD1EimmSN7wZJ08%3D&thumbnailType=2&token=eyJhbGciOiJSUzI1NiIsImtpZCI6IkQ4OThGN0RDMjk2ODQ1MDk1RUUwREZGQ0MzODBBOTM5NjUwNDNFNjQiLCJ0eXAiOiJKV1QiLCJ4NXQiOiIySmozM0Nsb1JRbGU0Tl84dzRDcE9XVUVQbVEifQ.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.oaXpdnADv9TQeypuEgIcv0o6Xl-8l1qgmW7m6XgpP9oo5YntirsMH24lvGP6aP34qWgrrmhXULMebYC_qoogzVmqAZgT7upvwHUBf79LH2Eu60P9LzuSlDpCnkNahq7KHmTmpJDCIuwTASlUjvHB16lZj2wd7_asxf2O-ODmEqX3GN6OwygPcDJF_3ErK8YYAZ5x3f95-OpUtEphMbYohAxXxWILHbL9YAZBgActpPlJTAsYxOmcdOl3iXjUyKRQT_jLukoyPRiYkIcC0JAnrHaH8-AlzijNakHIa-CBJuRMYpKfbfWWFBpTMknzNkCK8-goSBLwsyU89TRK7bYuFw&X-OWA-CANARY=mf5-zvc1ok2nUHkFztA8DmBhz7NIJtsYUvnT2aTuHWxCpeTsjOWj08cZHsyxqu123VUYQ_5J37o.&owa=outlook.office.com&scriptVer=20230303006.07&animation=true
-
https://attachments.office.net/owa/swright1%40americanfreight.us/service.svc/s/GetAttachmentThumbnail?id=AAMkADgzMmY0NWU3LWE5NTMtNDkwNC05NmVlLTA3NjcyNDQwNmE0OQBGAAAAAAABH%2BAvUSlpSqKn4aZzMw9tBwBDa8DLOZFUQ7P4Q5vCcGJjAAAAAAEJAABDa8DLOZFUQ7P4Q5vCcGJjAADbb6YfAAABEgAQAArJKuAYcD1EimmSN7wZJ08%3D&thumbnailType=2&token=eyJhbGciOiJSUzI1NiIsImtpZCI6IkQ4OThGN0RDMjk2ODQ1MDk1RUUwREZGQ0MzODBBOTM5NjUwNDNFNjQiLCJ0eXAiOiJKV1QiLCJ4NXQiOiIySmozM0Nsb1JRbGU0Tl84dzRDcE9XVUVQbVEifQ.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.oaXpdnADv9TQeypuEgIcv0o6Xl-8l1qgmW7m6XgpP9oo5YntirsMH24lvGP6aP34qWgrrmhXULMebYC_qoogzVmqAZgT7upvwHUBf79LH2Eu60P9LzuSlDpCnkNahq7KHmTmpJDCIuwTASlUjvHB16lZj2wd7_asxf2O-ODmEqX3GN6OwygPcDJF_3ErK8YYAZ5x3f95-OpUtEphMbYohAxXxWILHbL9YAZBgActpPlJTAsYxOmcdOl3iXjUyKRQT_jLukoyPRiYkIcC0JAnrHaH8-AlzijNakHIa-CBJuRMYpKfbfWWFBpTMknzNkCK8-goSBLwsyU89TRK7bYuFw&X-OWA-CANARY=mf5-zvc1ok2nUHkFztA8DmBhz7NIJtsYUvnT2aTuHWxCpeTsjOWj08cZHsyxqu123VUYQ_5J37o.&owa=outlook.office.com&scriptVer=20230303006.07&animation=true
-
https://claflin-my.sharepoint.com/:o:/g/personal/jmorrell_claflin_edu/Ei1vrj5B7tNDmo_enlticikBe7ojVBden5qaR-Au1abiUQ?e=kshznw
-