General

  • Target

    [ACTION NEEDED] Your account we has been locked. Sun, August 20, 2023 Case _ ID-TOCDGX9..eml.7z

  • Size

    146KB

  • MD5

    93a8f8c83d6ba07fc810218c24407e6d

  • SHA1

    1676a6b2e457b70481e372c5e69fcf5b70852704

  • SHA256

    d4f5382cad49f88e4a957222b502a8432810c700a2f28ed0f2146d435830e389

  • SHA512

    9b27ef30f085e4b3c146194916c1e8ba7f5e9ab4ee37e57a7d383d88e3cce3c0fd2528cdc7bc84dadca9833193d5e1b7e7184f54d8141ec9d551f999703d7ab6

  • SSDEEP

    3072:AC8BQEPood1SooI9ht1TRg1SrlCxOYAtCm6GSS2W4oCoqi+6iM5Bv:dZ1I11JJl4AtC1GSSA4X+6r5Bv

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • [ACTION NEEDED] Your account we has been locked. Sun, August 20, 2023 Case _ ID-TOCDGX9..eml.7z
    .7z
  • [ACTION NEEDED] Your account we has been locked. Sun, August 20, 2023 Case _ ID-TOCDGX9..eml
    .eml
    • https://aka.ms/AAb9ysg

  • Mail-AmazonCASEIQRSZ.pdf
    .pdf
    • https://trk.klclick3.com/ls/click?upn=DVhTaHpjtpnrnTIBRVrM2DE27lr3ALwFxXq8SSG1rpUQW0WbyjYu-2BktsD9zazQfJvI8Cv-2F1uWxtU6YoWiajj2A-3D-3Df6Ml_Za98whu9h54I3j0NJ-2BGorJkEvk7dcRqKWBfvlx5dJbgNGggkvXVEZHqFD1qyIKykvhttccj18FuUf2bY06VBqqsWkcYyj4NrAq7K-2FmPVKp5bBbeaRGSiZa7g0WUieAg8g0H61H5bkM8HrDnepCWUlrrfegiUKRfe8ZhpWtVJvGwQ5yh8m0PBnS48VmmQkqQqE3ebZhXAT8r8IITP6wYNmgZQD6bwE6vzxcWc-2Fz3COY25luW7rQCp4rq-2B5XZWJJOdevrBaEI9yGfKocFWbKLfVSwIbwaC-2BuEcAw8ffkNoCOBvSw443Chov7ACpSaTanYf

  • email-html-2.txt
    .html
  • email-plain-1.txt