General

  • Target

    Quarantined Messages (45).zip

  • Size

    550KB

  • MD5

    23b76759073092655128467a12830757

  • SHA1

    6545b103d0b9aca5943d30bf2915e19235bc116a

  • SHA256

    7dc22507a3f36fd6315a6aea8137cacf915c08d3046687818ed5cdebedc64bdb

  • SHA512

    50f501cacfe8bed8e0ef12e7ea7c7296759441b1a394f08593eafd34e1e7bbf7d8a512f2f81dcb9730822671834fd649f8f7f94150fad80600b818cc74c2e939

  • SSDEEP

    12288:8CKyWA1R8JjfiJy9YTA0Ep56ziYjrmjmZ4iCd8Has:T7WA1R2jfiJK7p56zierK4Cd8H/

Score
1/10

Malware Config

Signatures

Files

  • Quarantined Messages (45).zip
    .zip

    Password: infected

  • 3a7eab81-5fac-4b62-1f7b-08db587d1ede/5c84745f-a782-b5fb-d320-112b22859ad6.eml
    .eml
    • http://www.metrusproperties.com/home/

    • https://signatures.joeyai.net/metrus/download-vcard.jpg]

    • https://signatures.joeyai.net/metrus/stucci.vcf

    • https://signatures.joeyai.net/metrus/metrusproperties-url.jpg]

    • https://signatures.joeyai.net/metrus/50years.jpg]

    • https://signatures.joeyai.net/metrus/metrus-disclaimer.jpg]

  • 2021-10-13 - Invoice Recoverable CAM.pdf
    .pdf
  • 20230519112915307.pdf
    .pdf
  • email-html-2.txt
    .html
  • email-plain-1.txt