Overview
overview
5Static
static
1phish_aler...9).eml
windows7-x64
5phish_aler...9).eml
windows10-2004-x64
1email-html-1.html
windows7-x64
1email-html-1.html
windows10-2004-x64
1image001.png
windows7-x64
3image001.png
windows10-2004-x64
3image002.png
windows7-x64
3image002.png
windows10-2004-x64
3image003.png
windows7-x64
3image003.png
windows10-2004-x64
3image004.png
windows7-x64
3image004.png
windows10-2004-x64
3image005.jpg
windows7-x64
3image005.jpg
windows10-2004-x64
3image006.jpg
windows7-x64
3image006.jpg
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
phish_alert_sp2_2.0.0.0(39).eml
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
phish_alert_sp2_2.0.0.0(39).eml
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
email-html-1.html
Resource
win7-20230712-en
Behavioral task
behavioral4
Sample
email-html-1.html
Resource
win10v2004-20230703-en
Behavioral task
behavioral5
Sample
image001.png
Resource
win7-20230712-en
Behavioral task
behavioral6
Sample
image001.png
Resource
win10v2004-20230703-en
Behavioral task
behavioral7
Sample
image002.png
Resource
win7-20230712-en
Behavioral task
behavioral8
Sample
image002.png
Resource
win10v2004-20230703-en
Behavioral task
behavioral9
Sample
image003.png
Resource
win7-20230712-en
Behavioral task
behavioral10
Sample
image003.png
Resource
win10v2004-20230703-en
Behavioral task
behavioral11
Sample
image004.png
Resource
win7-20230712-en
Behavioral task
behavioral12
Sample
image004.png
Resource
win10v2004-20230703-en
Behavioral task
behavioral13
Sample
image005.jpg
Resource
win7-20230712-en
Behavioral task
behavioral14
Sample
image005.jpg
Resource
win10v2004-20230703-en
Behavioral task
behavioral15
Sample
image006.jpg
Resource
win7-20230712-en
Behavioral task
behavioral16
Sample
image006.jpg
Resource
win10v2004-20230703-en
General
-
Target
phish_alert_sp2_2.0.0.0(39).eml
-
Size
115KB
-
MD5
d368754571b19d52072cc5d4e8a9fd95
-
SHA1
1751c0ef8b774ced8eac77dbebcbc4cadfc66e7c
-
SHA256
5c56c1ffda8f9c6844b9dfcc490bd5ba49fc6c53621046186a91b02d6fac5f97
-
SHA512
590c23586c854283611d77757251e18fe16b298a81481b1438b8df3152bba6412f975ec8b23f0125af6e16d0fdc0da92d94a9db13f44b460ecfb9c85c3476b45
-
SSDEEP
1536:mlr9NCpY8hsR8ZS6eeLzwRd7U/iopIeuLezgefpeI2e0TeneeUsDFqNlXBu/samb:mlh+pmoxQqE04dRGA
Malware Config
Signatures
Files
-
phish_alert_sp2_2.0.0.0(39).eml.eml
-
https://linkprotect.cudasvc.com/url?a=https%3a%2f%2f31VYy.moralbusiness.com.br%2fwTiLM.76fOz%2fdG1vZUBhYmNsZWdhbC5jb20%3d&c=E,1,54--clFr_tfs4I4bftlLaBxVgJVPe_6dGoWzVBRMfPxVf5B8mhB9l09eX_7EeUpNrLHLoZMcfsQCysCq_3FpVqHOmVubQmtmILgtTWJcZwShy7b2UDnVnY4Cdg,,&typo=1
-
https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fwww.sheratonstore.com%2findex.aspx%3futm_source%3dsheraton-email%26utm_medium%3dpost-stay%26utm_term%3dtext-link%26utm_content%3devergreen%26utm_campaign%3devergreen&c=E,1,6Ozrc7OxaMHfD2VO0L6z7mwwTqQVURtYL5BS-i3UasuhRNFsd-lcG4uVhbhKjZHhpM_yzn9xfUNK8INRgTaMz6K_Ei06Y7DtgapG_Mx2&typo=1
-
https://www.marriott.com/about/privacy.mi
-
https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fwww.sheratonstore.com%2findex.aspx%3futm_source%3dsheraton-email%26utm_medium%3dpost-stay%26utm_term%3dtext-link%26utm_content%3devergreen%26utm_campaign%3devergreen&c=E,1,ewAScT0OQzbbimGqQDdzZxcfCTdFpzJn24sXCYcO2qa2OCpQg0yd0sWAI-xSC3em818970Jhp21gMbaRmqbn6QOMGuSAsxSx6FNgALLFh4JsWYMoMw--dEE3yCY,&typo=1
-
https://www.marriott.com/loyalty/earn/credit-card-rewards.mi?SCID=app:departurefolio_cobrand
-
https://www.marriott.com/about/terms-of-use.mi?
-
https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fmoffatcounty.colorado.gov%2f&c=E,1,Jl7uxyWNOU3EqyVJ-xvi9D_gl7MansIhb30R1f3H9xFf33yIESTU67KlWuFK39b1GiaRPqxLCRCHBo_kJWZ7fo1sOi78iSEmaXtAIXMr&typo=1
-
-
email-html-1.txt.html
-
image001.png.png
-
image002.png.png
-
image003.png.png
-
image004.png.png
-
image005.jpg.jpg
-
image006.jpg.jpg