Static task
static1
General
-
Target
Re One Investment Group ROC - 19042023 Daily Report.msg
-
Size
662KB
-
MD5
0ba0609ce207cbc5dabba27790b66895
-
SHA1
b2c3c0e22dc3aca4965741ebbe913630e4a55677
-
SHA256
91b471e263cbfd725a8ce0c2e5f8e8d91f9c5461f7492a432b910e872508edbc
-
SHA512
3e8e6e315ec4390445a1a9aa043ca996c6ba6a458658aa27f172894c44e26a3a502c2c2431fe00e5d2ba694695bf783423f1ac94ed5cb528ea62b9f2d338be8d
-
SSDEEP
6144:izQxOGxLVenNBeIP6kxhHzClydMGFa8TEHXDgRd3kPCB3noW3I/E5vCmlddXnxrw:imxMnNNynMxrldcykOxvuUG1cF8
Malware Config
Signatures
Files
-
Re One Investment Group ROC - 19042023 Daily Report.msg.msg
-
http://ctrl.co
-
http://ctrlgroup.io
-
https://console.mailguard.com.au/ras/25fmm65J7E/iufI48nJmzFt1dUJDpB51/1.5
-
https://linkprotect.cudasvc.com/url?a=http%3a%2f%2fctrl.co%2f&c=E,1,0UX5UonB6sPmeq2oHg4Nt9LcAZV_tsZ-L-T12KE8Z2aru4vFdgphcNXgICVxbRSIkZEmf8WBNKBtkcZy1-z1-sM0Oi-AVJ0Hqt4CxbH7TKVMUQ,,&typo=1
-
https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fconsole.mailguard.com.au%2fras%2f25eZZ2ToAw%2fpPnYTmQEK1IWaGeEOqeLU%2f1.8&c=E,1,2ubExuny9wQZa-VjT46qFRr3Min5tEfwXpKHzMWkgaHpnterNh5G6cumpsW32joBt-NPBAo0Y1sZTv6pcI6z9lQCdGmGB0vg_od1Ethl_O8SKIdMHqBwLg,,&typo=1
-
https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fctrl.co&c=E,1,Gc0ifXcOBrUBdKXme5EjWMFGz2N0kvUpJfD-EDB5mcnUNAJwkk98s5Iatd_1pTZGPKO48RnAIwnEyo_VtE2VLaVdcRogh_9moup5bddHIRUka3w-bjdEFaOkUrI,&typo=1&ancr_add=1
-
https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fctrl.co&c=E,1,He8p5NhzTpXlCF7DWz--XNLQbF585KHNMMFUm1IrR_tCnWtGqw-muIK94oOzHwv63JvoEZ66kZK5GSxdj0XQ3Ak8iyx_PkR9LBvIfSRqiHc,&typo=1
-
https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fctrlcybersecurity.sharepoint.com%2fsharespace%2fsecurity%2520operations%2fone%2520investment%2fdaily%2520reports%2f19042023.aspx%3fweb%3d1&c=E,1,Hn_7jLPZNYqsRKwvmiYItPhS25gX2HFLNfy19h6Gt_nhG-iQQNeIKIVFHImQR1WAhMuDpQtgW7YH_RDj35KTE5UgxyPxatFqmhSLj1Y_eP47bUKNDFylcKyp&typo=1
-
https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fctrlcybersecurity.sharepoint.com%2fsharespace%2fsecurity%2520operations%2fone%2520investment%2fdaily%2520reports%2f19042023.aspx%3fweb%3d1&c=E,1,JDWLKr1B098eHSOq3yQ8YEIiWB45SpY_ZYft5hWsbf6hTWIPdRfZG26EPwIQMQzlgYe3rzdsmVHDUV8Oz9QkTi-rD7Mh91Iv1nr-5XO0j98Bxw,,&typo=1
-
https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fctrlcybersecurity.sharepoint.com%2fsharespace%2fsecurity%2520operations%2fone%2520investment%2fdaily%2520reports%2f19042023.aspx%3fweb%3d1&c=E,1,RqTQzeI8Pxo8S6PE2ZkTdzc1RMPlmxBb6vTouPPwJOEmRstbFnQmAzgUkAtxP2Uf1b_kqfKXN_s97ukGEhMlJ-7csmOXVB6qpJd3QeEf_YZYALb_X5CvweYS&typo=1
-
https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fctrlcybersecurity.sharepoint.com%2fsharespace%2fsecurity%2520operations%2fone%2520investment%2fdaily%2520reports%2f19042023.aspx%3fweb%3d1&c=E,1,X2tlRdDWzhwTjL20vMsoMU84LGGr_mAr1pFPSgLdEDQp0_lsFh0SDikVjTmUbLA84YhuEYxvPmxzEa0y3Ftp6t-xk4zvV4xyTAJHpHSm4ja0vsvDqCtK&typo=1
-
https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fctrlcybersecurity.sharepoint.com%2fsharespace%2fsecurity%2520operations%2fone%2520investment%2fdaily%2520reports%2f19042023.aspx%3fweb%3d1&c=E,1,ZNssx8ZKol7IT7JJ3nz2xVAY1dr2aoaIbLtbKL16UeUxkXbAGW2yI_7t_AgPWk_leHiMKVBevI293v5FLinmILcLS_bG0DAjvwpTT4ibqK8uVHSRNOMfEg,,&typo=1
-
https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fctrlcybersecurity.sharepoint.com%2fsharespace%2fsecurity%2520operations%2fone%2520investment%2fdaily%2520reports%2f19042023.aspx%3fweb%3d1&c=E,1,sSvGaEAJ2ahNbx6C2y-ccpOB1dANZ2gSKxR6Tv-DBsbYDzK9PQ9uB5SGT8KIa4psxItmNZW-m-JCIbWp-rzxyMwCmA5VCplyHDkUEfCnmcI,&typo=1
-
https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fctrlcybersecurity.sharepoint.com%2fsharespace%2fsecurity%2520operations%2fone%2520investment%2fdaily%2520reports%2f19042023.aspx%3fweb%3d1&c=E,1,shNy7I-uUvrB5PKz79l_zLY-GLhJAXl7Izm8ip29zIInzkYbqPSQqbciD1w9ugYsfwNsSOv6evDPTNGgtcWsKWirWptU7zWfTIKR_XLZUbcX&typo=1
-
https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fctrlcybersecurity.sharepoint.com%2fsharespace%2fsecurity%2520operations%2fone%2520investment%2fdaily%2520reports%2f19042023.aspx%3fweb%3d1&c=E,1,svXC4meArJ2TNeT1zqTZ1gPvR1F9YOtjs-xMwgM5Bmct30E_JcwtWVS7PvyH2OsWiEPkbM7kJQpCoBI1VXOHx2FBFTSzjAN6LtCYd97pe_frvkhDP2cpzQ,,&typo=1
-
https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fctrlcybersecurity.sharepoint.com%2fsharespace%2fsecurity%2520operations%2fone%2520investment%2fdaily%2520reports%2f19042023.aspx%3fweb%3d1&c=E,1,xmQXUs_mdfwUP9GDRwCjGhOZtWh4_k1w2IcWdQ-XokaIYZinPa4hwwwEKOQHGL3pBh8PBIn5Mlm7ntvOg5EjogpgbsFIqK7tFNKOFU5wkfLfKnw,&typo=1
-
https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fwww.mailguard.com.au%2f&c=E,1,neTO6yWy66S_AyLp4NQ41jmFAuAkSEXTzc_63hO6ujweLin4TSxfiJJbHJFg1gPiTC7UjZvne2XVp7kL0IrraSGJWx_dML64Fyz-4fR1oTX08NO9sQ,,&typo=1
-
https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fwww.mailguard.com.au&c=E,1,fUZDz3KGIg_lta3oQhk3y7_iqioMvbLNLqvshc7ZTpGm6j-Vsa-guhepwOLrPWL_8Y6BOkheqIbJ4IWH5uUuD-j4G-vRWY1DkjW2lJlyLQ9t9oIg3TPx&typo=1
-
https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fwww.oneinvestment.com.au%2f&c=E,1,VuJPQJX01F1wTOGjeGIXqQNmtcSqNAK3BOC86aIRv9zoq0Lwc5fwh_gXmbmbsZzO487hWNkK1Dg96lK1b4eu2ps8gPu388D6u_VVsaEGchEevNJ-hRRxYFw7Ek-i&typo=1
-
https://www.linkedin.com/company/2370120
-
https://www.linkedin.com/company/ctrlcybersecurity
-
https://www.mailguard.com.au/
-
https://ctrl.co
-
http://ctrl.co/
-
https://console.mailguard.com.au/ras/25eZZ2ToAw/pPnYTmQEK1IWaGeEOqeLU/1.8
-
https://ctrlcybersecurity.sharepoint.com/sharespace/security%20operations/one%20investment/daily%20reports/19042023.aspx?web=1
-
https://www.mailguard.com.au
-
https://www.oneinvestment.com.au/
-
http://networkcc.com.au
-
http://oneinvestment.com.au
-
http://www.oneinvestment.com.au
- Show all
-
-
authorize[1].htm.js
-
image002.png.png
-
image003.png.png
-
image004.png.png
-
image005.png.png
-
~WRD0003.jpg.jpg