Static task
static1
Behavioral task
behavioral1
Sample
welcome_email_v3_calendar.png
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
welcome_email_v3_calendar.png
Resource
win10v2004-20230703-en
General
-
Target
Quarantined Messages.zip
-
Size
262KB
-
MD5
8917e2f3da9ed8158c5d8849976dc591
-
SHA1
cd2201b0ed6b3999ec168a9d1112e0fd040d1bf4
-
SHA256
094c25b2a73b231f42762cbbaf291eef45d25196eea39054d9daf6d78d8b738c
-
SHA512
5a0f508304624d23f227aa28479419dec624bb9c2b34602da70439b58b8b572f73f5b12f660804f8d52d2ebe3645329c609ae012b7f729e41e2b66d9208a2d17
-
SSDEEP
6144:1ScrY7c0FvtewqKPINyLI8ECE77GohtqY0/m40YGLueiS:Y7c0BtewD0yk8EB7aohtqYM0YG7iS
Malware Config
Signatures
Files
-
Quarantined Messages.zip.zip
Password: 123456
-
f48ba8a9-2bc9-4ad7-1dcd-08db93422aa6/ccd2cdd9-1235-1714-c5a9-d2e7aaf84814.eml.eml
Password: 123456
-
-
https://outlook.office365.com/owa/[email protected]/groupsubscription.ashx?realm=meliao365.onmicrosoft.com&source=WelcomeEmail&action=conversations&subaction=gotogroup
-
https://outlook.office365.com/owa/[email protected]/groupsubscription.ashx?realm=meliao365.onmicrosoft.com&source=WelcomeEmail&action=subscribe
-
https://outlook.office365.com/owa/[email protected]/groupsubscription.ashx?realm=meliao365.onmicrosoft.com&source=WelcomeEmail&action=conversations
-
https://outlook.office365.com/owa/[email protected]/groupsubscription.ashx?realm=meliao365.onmicrosoft.com&source=WelcomeEmail&action=files
-
https://outlook.office365.com/owa/[email protected]/groupsubscription.ashx?realm=meliao365.onmicrosoft.com&source=WelcomeEmail&action=onenote
-
https://outlook.office365.com/owa/?path=/group/[email protected]/calendar
-
https://outlook.office365.com/owa/[email protected]/groupsubscription.ashx?realm=meliao365.onmicrosoft.com&source=WelcomeEmail&action=site
-
https://outlook.office365.com/owa/[email protected]/groupsubscription.ashx?realm=meliao365.onmicrosoft.com&source=WelcomeEmail&action=planner
-
https://outlook.office365.com/owa/[email protected]/groupsubscription.ashx?realm=meliao365.onmicrosoft.com&source=WelcomeEmail&action=connectors
-
https://go.microsoft.com/fwlink/?LinkId=521839
- Show all
-
-
LogoM365.png.png
-
arrow.png.png
-
email-html-2.txt.html
-
email-plain-1.txt
-
group_member_photo0.jpg.jpg
-
group_member_photo1.jpg.jpg
-
group_member_photo2.jpg.jpg
-
group_member_photo3.jpg.jpg
-
group_member_photo4.jpg.jpg
-
group_photo.jpg
-
jira.png.png
-
microsoft.png.png
-
salesforce.png.png
-
trello.png.png
-
twitter_icon.png.png
-
welcome_email_v3_calendar.png.png
-
welcome_email_v3_conversations.png.png
-
welcome_email_v3_files.png.png
-
welcome_email_v3_onenote.png.png
-
welcome_email_v3_sharing_laptop.png.png
-
welcome_email_v3_teamwork_laptop.png.png