Static task
static1
Behavioral task
behavioral1
Sample
FW 50% Off! Summer Sale Starts Now.msg
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
FW 50% Off! Summer Sale Starts Now.msg
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
image001.jpg
Resource
win7-20230712-en
Behavioral task
behavioral4
Sample
image001.jpg
Resource
win10v2004-20230703-en
Behavioral task
behavioral5
Sample
image002.png
Resource
win7-20230712-en
Behavioral task
behavioral6
Sample
image002.png
Resource
win10v2004-20230703-en
Behavioral task
behavioral7
Sample
~WRD0000.jpg
Resource
win7-20230712-en
Behavioral task
behavioral8
Sample
~WRD0000.jpg
Resource
win10v2004-20230703-en
General
-
Target
FW 50% Off! Summer Sale Starts Now.msg
-
Size
166KB
-
MD5
1073ef0ee8fa4bbfc97884bdd04fb1f3
-
SHA1
921e15bb84ddf9ebed29e5809a8e1cff76703d4f
-
SHA256
93cdba54395d1c7baa5dba9cab2d5fc4bae32f2d0ac82c7a6f407b7b98cce07c
-
SHA512
281895f3e4aae1c65c217d46db028b8687058610b428c94e556371683b49e7162d7464ba62e7804034109b7fe48ca20da172d227cf4786c6869971544d6ddf6c
-
SSDEEP
1536:8vs+WHDBeUeo+uUtK9a/jZcSzQvD6SqfTWeWSWzqWgWRWzmncnGAiH5CZFti:8LWHte1ru99YcoEKubwGPyzi
Malware Config
Signatures
Files
-
FW 50% Off! Summer Sale Starts Now.msg.msg
-
https://app.e2ma.net/app2/audience/signup/1987108/1965349.418822437/
-
https://app.e2ma.net/app2/audience/signup/1987108/1965349/418822437/101975246117/?s=WXhFb4EhrgJXejDFdkMPfjE6PUCePIy3MrLPg638aKU
-
https://t.e2ma.net/click/vq3m7g/rrppr4kb/3oj0ty
-
https://t.e2ma.net/click/vq3m7g/rrppr4kb/3sq0ty
-
https://t.e2ma.net/click/vq3m7g/rrppr4kb/73h0ty
-
https://t.e2ma.net/click/vq3m7g/rrppr4kb/77o0ty
-
https://t.e2ma.net/click/vq3m7g/rrppr4kb/bjg0ty
-
https://t.e2ma.net/click/vq3m7g/rrppr4kb/bnn0ty
-
https://t.e2ma.net/click/vq3m7g/rrppr4kb/f2l0ty
-
https://t.e2ma.net/click/vq3m7g/rrppr4kb/fye0ty
-
https://t.e2ma.net/click/vq3m7g/rrppr4kb/jdd0ty
-
https://t.e2ma.net/click/vq3m7g/rrppr4kb/jhk0ty
-
https://t.e2ma.net/click/vq3m7g/rrppr4kb/jlr0ty
-
https://t.e2ma.net/click/vq3m7g/rrppr4kb/n0p0ty
-
https://t.e2ma.net/click/vq3m7g/rrppr4kb/nwi0ty
-
https://t.e2ma.net/click/vq3m7g/rrppr4kb/rbh0ty
-
https://t.e2ma.net/click/vq3m7g/rrppr4kb/rfo0ty
-
https://t.e2ma.net/click/vq3m7g/rrppr4kb/vqf0ty
-
https://t.e2ma.net/click/vq3m7g/rrppr4kb/vum0ty
-
https://t.e2ma.net/click/vq3m7g/rrppr4kb/z5d0ty
-
https://t.e2ma.net/click/vq3m7g/rrppr4kb/z9k0ty
-
https://t.e2ma.net/click/vq3m7g/rrppr4kb/zds0ty
-
https://t.e2ma.net/message/vq3m7g/rrppr4kb
-
https://t.e2ma.net/optout/vq3m7g/rrppr4kb?s=ao6xjAYLmGQWDKOU6Sr0cl6Q674uvh3dkaItbqToeqc
-
http://texashighways.com
-
http://txdot.gov
- Show all
-
-
image001.jpg.jpg
-
image002.png.png
-
~WRD0000.jpg.jpg