Overview

overview

5

Static

static

1

Incoming D...ps.eml

windows7-x64

5

Incoming D...ps.eml

windows10-2004-x64

3

email-html-1.txt

windows7-x64

1

email-html-1.txt

windows10-2004-x64

1

message_v2.rpmsg

windows7-x64

3

message_v2.rpmsg

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Incoming Document from Strategycorps.zip

  • Size

    1.8MB

  • MD5

    d4da9d3dfcdccb37c395dc661d51f661

  • SHA1

    f0e2c5db88748fda71641afa374885d13240f1a4

  • SHA256

    7425dce46b5d5d740d1287125b387448ac25acf1c91a559278779021a15c613f

  • SHA512

    32864a87a0f6506119d2fc0287cdde98cb27f091390c823c963d6fa8a62f238e9fe1b0c5a3503e385d39bb4e7a1cb9a2586e5e3eecc316ab8986b43668b0038d

  • SSDEEP

    49152:mG9U/cpWEI2AOJLhnCUW0SST5zVYI5gureOlXplCIJ:m+U/YID4LmXSTVKbuL5lP

Score
1/10

Malware Config

Signatures

Files

  • Incoming Document from Strategycorps.zip
    .zip

    Password: friday

  • Incoming Document from Strategycorps.eml
    .eml

    Password: friday

    • https://outlook.office365.com/owa/?viewmodel=ReadMessageItem&InternetMessageID=%3cSA0PR19MB42234A5049A6A2A7AC0CC06D9658A%40SA0PR19MB4223.namprd19.prod.outlook.com%3e

    • https://go.microsoft.com/fwlink/?Linkid=844050

    • https://go.microsoft.com/fwlink/p/?linkid=857875

  • email-html-1.txt
  • message_v2.rpmsg