Overview
overview
5Static
static
1a1s-root1=...12.eml
windows7-x64
5a1s-root1=...12.eml
windows10-2004-x64
1AttachedImage.png
windows7-x64
3AttachedImage.png
windows10-2004-x64
3email-html-2.html
windows7-x64
1email-html-2.html
windows10-2004-x64
1email-plain-1.txt
windows7-x64
1email-plain-1.txt
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
a1s-root1=email_banfield_2023_05_23_19_SMTP-att-1-4QQkWm1nZ3z1T4Qv-2023-05-23T19_14_12.eml
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
a1s-root1=email_banfield_2023_05_23_19_SMTP-att-1-4QQkWm1nZ3z1T4Qv-2023-05-23T19_14_12.eml
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
AttachedImage.png
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
AttachedImage.png
Resource
win10v2004-20230221-en
Behavioral task
behavioral5
Sample
email-html-2.html
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
email-html-2.html
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
email-plain-1.txt
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
email-plain-1.txt
Resource
win10v2004-20230220-en
General
-
Target
a1s-root1=email_banfield_2023_05_23_19_SMTP-att-1-4QQkWm1nZ3z1T4Qv-2023-05-23T19_14_12.eml.infected
-
Size
53KB
-
MD5
bd2a98d6f32e1a83ada1275c99633ca6
-
SHA1
fb72be6b561ad46a62a7dd311d074427bfcacfd2
-
SHA256
e79414acd209a0e6c9dddc6d7c48d3dc77d6443cadfb2ed7068b7279f1083f56
-
SHA512
8e4064a19cc34f0369703c09c9881b63331fd10c879adf1a5b65ceb7ea60ebb67cebc2d69702b89d9de403df77d8b97e336b6ee9efb4bbadceecf691fcead9b5
-
SSDEEP
1536:ofkqppUwFe8Sv22p2Kd/NeYYeSu72UUh1:ofzpfFKUuSfD
Malware Config
Signatures
Files
-
a1s-root1=email_banfield_2023_05_23_19_SMTP-att-1-4QQkWm1nZ3z1T4Qv-2023-05-23T19_14_12.eml.infected.eml
-
https://aka.ms/LearnAboutSenderIdentification
-
https://provisioned-my.sharepoint.com:443/:b:/g/personal/dskolaut_provisioned_net/EWYVBN_zkdVGjPKgHMhr_yEBuQE9atn24Ocm-2eI5B5DPg?e=4%3a3qkSPO&at=9
-
https://eastus2r-notifyp.svc.ms:443/api/v2/tracking/method/Click?mi=1_ZYUkr3wka8FvcuZ-rQ_w&tc=PrivacyStatement&cs1=c82d47811e53b8a5d2df6a9741f7917cd69193e9f4c927d352b0b09586ce4cc6&cs2=e904d62807d7d8a08355e9a7a50afb8d836b2e5907b97e0fba743b3318254399&ru=
-
https://nam02.safelinks.protection.outlook.com/ap/b-59584e83/?url=https%3A%2F%2Fprovisioned-my.sharepoint.com%2F%3Ab%3A%2Fg%2Fpersonal%2Fdskolaut_provisioned_net%2FEWYVBN_zkdVGjPKgHMhr_yEBuQE9atn24Ocm-2eI5B5DPg%3Fe%3D4%253a3qkSPO%26at%3D9&data=05%7C01%7Cashley.gutierrez%40banfield.com%7C96ef79140d0f4219216e08db5bba38de%7C679f63d1e1854a47a081c530ccf734f8%7C0%7C0%7C638204628205956356%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=QfEd8X8fTu9GAt7zmDFxzgykLWpJAl1u0sWsm4Oh%2FM4%3D&reserved=0
-
https://nam02.safelinks.protection.outlook.com/ap/b-59584e83/?url=https%3A%2F%2Fprovisioned-my.sharepoint.com%2F%3Ab%3A%2Fg%2Fpersonal%2Fdskolaut_provisioned_net%2FEWYVBN_zkdVGjPKgHMhr_yEBuQE9atn24Ocm-2eI5B5DPg%3Fe%3D4%253a3qkSPO%26at%3D9&data=05%7C01%7Cashley.gutierrez%40banfield.com%7C96ef79140d0f4219216e08db5bba38de%7C679f63d1e1854a47a081c530ccf734f8%7C0%7C0%7C638204628206112634%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=SE6%2F9gcLBjxUkCO7HfHsiwoN4nmc1kX9HY1rv7ecbD4%3D&reserved=0
-
https://eastus2r-notifyp.svc.ms/api/v2/tracking/method/Click?mi=1_ZYUkr3wka8FvcuZ-rQ_w&tc=PrivacyStatement&cs1=c82d47811e53b8a5d2df6a9741f7917cd69193e9f4c927d352b0b09586ce4cc6&cs2=e904d62807d7d8a08355e9a7a50afb8d836b2e5907b97e0fba743b3318254399&ru=https%3a%2f%2fprivacy.microsoft.com%2fprivacystatement%5c
-
-
AttachedImage.png
-
email-html-2.txt.html
-
email-plain-1.txt