Potential Phish Reminder__Thursday April 20 2023[.][.]msg | Triage

Sharing

General

Target

Potential Phish Reminder__Thursday April 20 2023..msg
Size

111KB
MD5

d021b1220cda98174be2583c07e1b071
SHA1

b2ba00ecde7536ab30145ea87123c8b396ca1715
SHA256

1ae5d8713effd20e55e3701642d4cf37866e69bfeedd7af6d47cd9de38d02810
SHA512

5b36b8d9136c23078328cb66d8a7841195dc35ac60aaecb68e4f5221c2e635340d55eea2e6d65b25087a8d892a518ad8000cc6063f6a47c7f92b73bb00f18e5a
SSDEEP

1536:Q2jELXWfeaPFwk70jTWNWhc3IN4+g31l//U7DmZGyTi:0GwbjJ4+g3PMC/Ti

Score

8^/10

macro xlm

Malware Config

Signatures

Suspicious Office macro 1 IoCs
Office document equipped with 4.0 macros.
macro xlm

Processes:

resource yara_rule

sample office_xlm_macros

Files

Potential Phish Reminder__Thursday April 20 2023..msg
.msg
- http://1.us
- http://BL0GCC02FT006.eop-gcc02.prod.protection.outlook.com
- http://BL0GCC02FT006.mail.protection.outlook.com
- http://BN6PR09CA0071.namprd09.prod.outlook.com
- http://BN6PR09CA0071.outlook.office365.com
- http://SA0PR09MB7050.namprd09.prod.outlook.com
- http://SJ0PR09MB9318.namprd09.prod.outlook.com
- http://a8-81.smtp-out.amazonses.com
- http://amazonses.com
- http://email.amazonses.com
- https://mail.turing.com/api/analytics?ti=d554d536f06a156d824003d0c664b257c1ebe0746f5c636f01cb954c5f0c4b684821ae3ba8e679c9e7728c86aa69b0b0eed472c96393f62a0c431339782e0ac4d40f4a8cad32476fff07a90a24abc253eae29ade09a4a164d68248967df03bc0b5257f664b57a390cc3682f8eca1aefd040988f60d0b6f829267aae6229c4d&rd=http://100KGuiedt5.tdcj.kpcourtney.wrightjbu.digifieds.sa.com/?code=Y291cnRuZXkud3JpZ2h0QHRkY2oudGV4YXMuZ292
- https://mail.turing.com/api/analytics?ti=d554d536f06a156d824003d0c664b257c1ebe0746f5c636f01cb954c5f0c4b684821ae3ba8e679c9e7728c86aa69b0b0eed472c96393f62a0c431339782e0ac4d40f4a8cad32476fff07a90a24abc253eae29ade09a4a164d68248967df03bc0b5257f664b57a390cc3682f8eca1aefd040988f60d0b6f829267aae6229c4d&rd=http://100KGuiedt5.tdcj.kpcourtney.wrightjbu.digifieds.sa.com/?code=Y291cnRuZXkud3JpZ2h0QHRkY2oudGV4YXMuZ292
- http://mail.swdiris.com
- http://protection.outlook.com
- http://swdiris.com
- http://tdcj.texas.gov
- Show all
Headers.txt
.eml
wizzy.PNG
.png