Static task
static1
Behavioral task
behavioral1
Sample
Fwd Mircosoft Billing Declined Wednesday July 12 2023 327 p.m..msg
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Fwd Mircosoft Billing Declined Wednesday July 12 2023 327 p.m..msg
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
Mircosoft billing.html
Resource
win7-20230712-en
Behavioral task
behavioral4
Sample
Mircosoft billing.html
Resource
win10v2004-20230703-en
General
-
Target
SCT-26349 - Wayne Bodkin suspicious email investigation.zip
-
Size
39KB
-
MD5
d54277264fdaf8159c7210ffcc690ff5
-
SHA1
1e9c51febcd6c5a959dc89b3f179fa37cc7fc80e
-
SHA256
4917f478821f340a987f0d55fbf6555532ed8a2afb23937b221cbd7abc253b7e
-
SHA512
5248dd3521925da74477ec0d11d4196ff0e4c36e7e98030f19860ff4cc41b16f3ee8776d7475d5a776d0180f809f3cbd8525670ade3e2b81e26751390bd06cd3
-
SSDEEP
768:DRukOw1AiDbAhmvqNn2Yht+/R6PKBEE33i6p4xXd8:Dl9AhUAn2GIlme4c
Malware Config
Signatures
Files
-
SCT-26349 - Wayne Bodkin suspicious email investigation.zip.zip
-
Behavior details.csv
-
Fwd Mircosoft Billing Declined Wednesday July 12 2023 327 p.m..msg.msg
-
http://darwinport.com.au
-
http://storage.com
-
-
Mircosoft billing.html.html .js