Overview
overview
5Static
static
1An importa...m..eml
windows7-x64
5An importa...m..eml
windows10-2004-x64
3SecureMessage.zip
windows7-x64
1SecureMessage.zip
windows10-2004-x64
1message_73...01.htm
windows7-x64
1message_73...01.htm
windows10-2004-x64
1email-html-2.txt
windows7-x64
1email-html-2.txt
windows10-2004-x64
1email-plain-1.txt
windows7-x64
1email-plain-1.txt
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
An important encrypted corporate email has been sent to you - Remote ID - 50284023 - 3_26_2023 10 37 57 p.m..eml
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
An important encrypted corporate email has been sent to you - Remote ID - 50284023 - 3_26_2023 10 37 57 p.m..eml
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
SecureMessage.zip
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
SecureMessage.zip
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
message_730135_800177701.htm
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
message_730135_800177701.htm
Resource
win10v2004-20230221-en
Behavioral task
behavioral7
Sample
email-html-2.txt
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
email-html-2.txt
Resource
win10v2004-20230221-en
Behavioral task
behavioral9
Sample
email-plain-1.txt
Resource
win7-20230220-en
Behavioral task
behavioral10
Sample
email-plain-1.txt
Resource
win10v2004-20230220-en
General
-
Target
An important encrypted corporate email has been sent to you - Remote ID - 50284023 - 3_26_2023 10 37 57 p.m..eml
-
Size
14KB
-
MD5
488412b955a50a18c1d774e65ca042c1
-
SHA1
96ce44dc754469889b44f91157d3ddcc92c781c5
-
SHA256
b7503fc7b3fcf9122f4839adf1fe61e258f6967e3712e5e00a8922469f539d1e
-
SHA512
f19aaf6117901f75388ffff7182dc3d963d5446d21c42846346f294cc5b5aa0a3fadca42f3ce8cd1b71387ba7b9d3fe262db03b3d3bb0838799fb122df3d1373
-
SSDEEP
384:Sj4BVtIh2bEOIaJleX80B28PAss0IlUYSNo:mStIh2buaJi28Zs0jRNo
Malware Config
Signatures
Files
-
An important encrypted corporate email has been sent to you - Remote ID - 50284023 - 3_26_2023 10 37 57 p.m..eml.eml
-
SecureMessage.zip.zip
-
message_730135_800177701.htm
-
email-html-2.txt
-
email-plain-1.txt