General

  • Target

    Alerta correo sospechoso_RV_ Desinstalación de software no autorizado .msg

  • Size

    318KB

  • MD5

    8581c245afb38e65ce226fd888704c7e

  • SHA1

    78bea25a461fe59f458ca477015e29fdea336d84

  • SHA256

    4d6d2fe7c4a4a83eade7a65e489ec0875377c78264daa6a69cd8df996e265719

  • SHA512

    da535ac69019872a9ef50d31e74b8f7e29a45f7382b187617b07fb5e2a5c6e39fa917472caa298774d90b9037fd1c5f0f1e0edc13d38c40fd8cd03553e936969

  • SSDEEP

    3072:AizePns3L9xZifkl4z7FxeAPozbUjissRK4OM17ARgz47/WJI0ol8mvpmW+ZbXm0:QK9xZiXeAAbm847/Wa8kEWeTTX1

Score
1/10

Malware Config

Signatures

Files

  • Alerta correo sospechoso_RV_ Desinstalación de software no autorizado .msg
    .msg
    • http://geb.com.co

    • https://go.microsoft.com/fwlink/?Linkid=844050

    • https://go.microsoft.com/fwlink/p/?linkid=857875

    • https://outlook.office365.com/Encryption/lock.png

    • https://outlook.office365.com/owa/?viewmodel=ReadMessageItem&InternetMessageID=%3cBN6PR08MB3411E90818252601E2F3F866F2E3A%40BN6PR08MB3411.namprd08.prod.outlook.com%3e

    • https://outlook.office365.com/owa/?viewmodel=ReadMessageItem&InternetMessageID=%3cBN6PR08MB3411E90818252601E2F3F866F2E3A%40BN6PR08MB3411.namprd08.prod.outlook.com%3e

  • message.rpmsg