Static task
static1
Behavioral task
behavioral1
Sample
RE.eml.zip
Resource
win10-20230220-en
Behavioral task
behavioral2
Sample
RE-c151926ed0344154ef0c.eml
Resource
win10-20230220-en
Behavioral task
behavioral3
Sample
attachment-3
Resource
win10-20230220-en
Behavioral task
behavioral4
Sample
email-html-2.txt
Resource
win10-20230220-en
Behavioral task
behavioral5
Sample
email-plain-1.txt
Resource
win10-20230220-en
General
-
Target
RE.eml.zip
-
Size
14KB
-
MD5
d084f247c01548619cdac9b91d5dd5c8
-
SHA1
2f1cb8c64fe271fd7b30a72ca243f8e4e0edbcc7
-
SHA256
cc8bf47b1041c5f2cc1f83aa16dc882ba9b8697760f2461e519fff4fd3f77c0e
-
SHA512
a04110157e344d70a7518c835d13ae9952776bf93238c4040cf561a6cfd880a1c2d9f8c4039065edc030ad6abfe3ba21e9b0cb02c1f102a549f4dcc2c6769583
-
SSDEEP
192:qS9Gts+cQDqZIFR8+5fPKpYiE9bt8FEgOQCI5LqOSSXbH1r7PNqrDjH21ea89+B/:Z9GevQGZIFRl5fPAmaF62ql+VrgruWU3
Malware Config
Signatures
Files
-
RE.eml.zip.zip
Password: infected
-
RE-c151926ed0344154ef0c.eml.eml
Password: infectado
-
https://www.linkedin.com/comm/feed/?midToken=AQEYE3qPSOSPPQ&midSig=2CNZ6oXgCQ9W01&trk=eml-email_m2m_invite_single_01-header-14-home&trkEmail=eml-email_m2m_invite_single_01-header-14-home-null-fmu0kd%7Ekvqvf4ft%7Ek2-null-neptune%2Ffeed&lipi=urn%3Ali%3Apage%3Aemail_email_m2m_invite_single_01%3BncUW9lfmRnCtVPWO0s6i9A%3D%3D
-
https://www.linkedin.com/comm/in/donaldo-trumpo-511716224?midToken=AQEYE3qPSOSPPQ&midSig=2CNZ6oXgCQ9W01&trk=eml-email_m2m_invite_single_01-header-22-profile&trkEmail=eml-email_m2m_invite_single_01-header-22-profile-null-fmu0kd%7Ekvqvf4ft%7Ek2-null-neptune%2Fprofile%7Evanity%2Eview&lipi=urn%3Ali%3Apage%3Aemail_email_m2m_invite_single_01%3BncUW9lfmRnCtVPWO0s6i9A%3D%3D
-
https://www.linkedin.com/comm/in/francoislane?midToken=AQEYE3qPSOSPPQ&midSig=2CNZ6oXgCQ9W01&trk=eml-email_m2m_invite_single_01-hero-2-prof%7Ephoto&trkEmail=eml-email_m2m_invite_single_01-hero-2-prof%7Ephoto-null-fmu0kd%7Ekvqvf4ft%7Ek2-null-neptune%2Fprofile%7Evanity%2Eview&lipi=urn%3Ali%3Apage%3Aemail_email_m2m_invite_single_01%3BncUW9lfmRnCtVPWO0s6i9A%3D%3D
-
https://www.linkedin.com/comm/in/francoislane?midToken=AQEYE3qPSOSPPQ&midSig=2CNZ6oXgCQ9W01&trk=eml-email_m2m_invite_single_01-hero-3-prof%7Ename&trkEmail=eml-email_m2m_invite_single_01-hero-3-prof%7Ename-null-fmu0kd%7Ekvqvf4ft%7Ek2-null-neptune%2Fprofile%7Evanity%2Eview&lipi=urn%3Ali%3Apage%3Aemail_email_m2m_invite_single_01%3BncUW9lfmRnCtVPWO0s6i9A%3D%3D
-
https://www.linkedin.com/comm/mynetwork/invite-accept/invitationId/6863507813998575637/sharedKey/FBZNnYN8/?midToken=AQEYE3qPSOSPPQ&midSig=2CNZ6oXgCQ9W01&trk=eml-email_m2m_invite_single_01-null-0-accept%7Ecta&trkEmail=eml-email_m2m_invite_single_01-null-0-accept%7Ecta-null-fmu0kd%7Ekvqvf4ft%7Ek2-null-neptune%2Fmynetwork%2Einvite%7Eaccept&lipi=urn%3Ali%3Apage%3Aemail_email_m2m_invite_single_01%3BncUW9lfmRnCtVPWO0s6i9A%3D%3D
-
https://www.linkedin.com/comm/in/francoislane?midToken=AQEYE3qPSOSPPQ&midSig=2CNZ6oXgCQ9W01&trk=eml-email_m2m_invite_single_01-hero-4-prof%7Ecta&trkEmail=eml-email_m2m_invite_single_01-hero-4-prof%7Ecta-null-fmu0kd%7Ekvqvf4ft%7Ek2-null-neptune%2Fprofile%7Evanity%2Eview&lipi=urn%3Ali%3Apage%3Aemail_email_m2m_invite_single_01%3BncUW9lfmRnCtVPWO0s6i9A%3D%3D
-
https://www.linkedin.com/e/v2?e=fmu0kd-kvqvf4ft-k2&t=lun&midToken=AQEYE3qPSOSPPQ&midSig=2CNZ6oXgCQ9W01&ek=email_m2m_invite_single_01&li=19&m=unsub&ts=unsub&eid=fmu0kd-kvqvf4ft-k2&loid=AQGx2m7g6gBTBgAAAX0AWdycVsJtMGTnU8lvLTTkwzrS2EbRAGVhS0jfgOkHZxaddsO6-fnK7Sil_McT0f2JXs7qNs3fUvcAh09xFwGt6A
-
https://www.linkedin.com/e/v2?e=fmu0kd-kvqvf4ft-k2&lipi=urn%3Ali%3Apage%3Aemail_email_m2m_invite_single_01%3BncUW9lfmRnCtVPWO0s6i9A%3D%3D&a=customerServiceUrl&midToken=AQEYE3qPSOSPPQ&midSig=2CNZ6oXgCQ9W01&ek=email_m2m_invite_single_01&li=18&m=footer&ts=help&articleId=67
-
https://www.linkedin.com/e/v2?e=fmu0kd-kvqvf4ft-k2&lipi=urn%3Ali%3Apage%3Aemail_email_m2m_invite_single_01%3BncUW9lfmRnCtVPWO0s6i9A%3D%3D&a=customerServiceUrl&midToken=AQEYE3qPSOSPPQ&midSig=2CNZ6oXgCQ9W01&ek=email_m2m_invite_single_01&articleId=4788
-
https://www.linkedin.com/comm/feed/?midToken=AQEYE3qPSOSPPQ&midSig=2CNZ6oXgCQ9W01&trk=eml-email_m2m_invite_single_01-footer-16-home&trkEmail=eml-email_m2m_invite_single_01-footer-16-home-null-fmu0kd%7Ekvqvf4ft%7Ek2-null-neptune%2Ffeed&lipi=urn%3Ali%3Apage%3Aemail_email_m2m_invite_single_01%3BncUW9lfmRnCtVPWO0s6i9A%3D%3D
-
http://enotungay.xyz/?54k3HVmYfMtrxMMHUMi3B1ISzPLn4ow8DkOXg25dNs544GiuW
-
http://enotungay.xyz/?WHneZWTtr7903gPj5NvJ0LDh7U4ugo6Rd6B28F53VipMlYmy5
- Show all
-
-
attachment-3
-
email-html-2.txt
-
email-plain-1.txt