Static task
static1
Behavioral task
behavioral1
Sample
Undeliverable RE Felicia sent a message.msg
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Undeliverable RE Felicia sent a message.msg
Resource
win10v2004-20230703-en
General
-
Target
Undeliverable RE Felicia sent a message.msg
-
Size
302KB
-
MD5
ffa50c2809d5dd33ac57a5aa3a1aaff6
-
SHA1
05743c70477c5710cf954d83d58232ac456a2043
-
SHA256
cc21f2b1e445a72baaec72d05004fe910fb576063bad4c5fee1be8715255695b
-
SHA512
87b18a7dde825301f55be0e14acb1d7ffc1ffb9258f1c50ba410f1ef9855962090229b98aeaeb6c074829d9eb8feaf642b639b99c1e9e4a02d256cc2b1f3507d
-
SSDEEP
6144:S7nm4+PrZitOoVrL7cVU8AoeupX5XApQpupwfAhMt5XApQpTpjnJrZitOoVrL7cU:SLmHPrZitOoVrL7cVU8AoeupX5XApQpg
Malware Config
Signatures
Files
-
Undeliverable RE Felicia sent a message.msg.msg
-
http://BL0GCC02FT010.eop-gcc02.prod.protection.outlook.com
-
http://BL0GCC02FT010.mail.protection.outlook.com
-
http://BL0GCC02FT031.eop-gcc02.prod.protection.outlook.com
-
http://BL0GCC02FT031.mail.protection.outlook.com
-
http://BL0GCC02FT040.eop-gcc02.prod.protection.outlook.com
-
http://BL0GCC02FT040.mail.protection.outlook.com
-
http://BY5PR09MB4946.namprd09.prod.outlook.com
-
http://DM3GCC02FT008.eop-gcc02.prod.protection.outlook.com
-
http://DM3GCC02FT015.eop-gcc02.prod.protection.outlook.com
-
http://DM3GCC02FT015.mail.protection.outlook.com
-
http://DM5PR09CA0010.namprd09.prod.outlook.com
-
http://DM5PR09CA0010.outlook.office365.com
-
http://DM5PR09CA0011.namprd09.prod.outlook.com
-
http://DM5PR09CA0011.outlook.office365.com
-
http://DM5PR09CA0017.namprd09.prod.outlook.com
-
http://DM5PR09CA0017.outlook.office365.com
-
http://GCC02-BL0-obe.outbound.protection.outlook.com
-
http://GCC02-DM3-obe.outbound.protection.outlook.com
-
http://PH8PR09MB10267.namprd09.prod.outlook.com
-
http://PH8PR09MB9136.namprd09.prod.outlook.com
-
http://SA0PR09MB7340.namprd09.prod.outlook.com
-
http://SA1PR09MB10153.namprd09.prod.outlook.com
-
http://TDCJ093.onmicrosoft.com
-
http://gcc-email.teams.microsoft.com
-
http://go.microsoft.com/fwlink/p/?LinkID=512132
-
https://go.microsoft.com/fwlink/?LinkId=389363
-
https://go.microsoft.com/fwlink/?LinkId=397497
-
https://go.microsoft.com/fwlink/?LinkId=618497
-
https://products.office.com/en-us/CMSImages/Office365Logo_Orange.png?version=b8d100a9-0a8b-8e6a-88e1-ef488fee0470
-
https://teams.microsoft.com/l/chat/19:1d90d53f-0509-48eb-851e-48d93d94a8d4_756236de-cfce-41a5-a6ba-d93541ede96e@unq.gbl.spaces/conversations?tenantId=141c92ac-0676-4927-8872-31ac367a826b&lm=deeplink&lmsrc=email&emltid=bc32258d-e6e8-433e-ac7e-e68458137851&linkpos=0&emltype=New_Activities&linktype=openSkypeTeams&cmpid=missedActivity
-
https://teams.microsoft.com/l/chat/19:1d90d53f-0509-48eb-851e-48d93d94a8d4_756236de-cfce-41a5-a6ba-d93541ede96e@unq.gbl.spaces/conversations?tenantId=141c92ac-0676-4927-8872-31ac367a826b&lm=deeplink&lmsrc=email&emltid=bc32258d-e6e8-433e-ac7e-e68458137851&linkpos=1&emltype=New_Activities&linktype=New_ChatActivity&cmpid=missedActivity
-
https://teams.microsoft.com/l/chat/19:1d90d53f-0509-48eb-851e-48d93d94a8d4_756236de-cfce-41a5-a6ba-d93541ede96e@unq.gbl.spaces/conversations?tenantId=141c92ac-0676-4927-8872-31ac367a826b&lm=deeplink&lmsrc=email&emltid=bc32258d-e6e8-433e-ac7e-e68458137851&linkpos=0&emltype=New_Activities&linktype=openSkypeTeams&cmpid=missedActivity
-
https://teams.microsoft.com/l/chat/19:1d90d53f-0509-48eb-851e-48d93d94a8d4_756236de-cfce-41a5-a6ba-d93541ede96e@unq.gbl.spaces/conversations?tenantId=141c92ac-0676-4927-8872-31ac367a826b&lm=deeplink&lmsrc=email&emltid=bc32258d-e6e8-433e-ac7e-e68458137851&linkpos=1&emltype=New_Activities&linktype=New_ChatActivity&cmpid=missedActivity
-
http://mail-bl0gcc02on2065.outbound.protection.outlook.com
-
http://mail-dm3gcc02on2083.outbound.protection.outlook.com
-
http://mail-dm3gcc02on2089.outbound.protection.outlook.com
-
http://microsoft.com
-
http://mx.microsoft.com
-
http://protection.outlook.com
-
http://tdcj.texas.gov
-
http://tdcj093.onmicrosoft.com
- Show all
-
-
image001.png.png
-
image006.png.png
-
image007.png.png
-
image008.png.png
-
image009.png.png
-
image010.png.png