Static task
static1
Behavioral task
behavioral1
Sample
Alerta correo sospechoso_RV_ Desinstalación de software no autorizado .msg
Resource
win7-20230712-es
Behavioral task
behavioral2
Sample
Alerta correo sospechoso_RV_ Desinstalación de software no autorizado .msg
Resource
win10v2004-20230703-es
General
-
Target
Alerta correo sospechoso_RV_ Desinstalación de software no autorizado .msg
-
Size
318KB
-
MD5
8581c245afb38e65ce226fd888704c7e
-
SHA1
78bea25a461fe59f458ca477015e29fdea336d84
-
SHA256
4d6d2fe7c4a4a83eade7a65e489ec0875377c78264daa6a69cd8df996e265719
-
SHA512
da535ac69019872a9ef50d31e74b8f7e29a45f7382b187617b07fb5e2a5c6e39fa917472caa298774d90b9037fd1c5f0f1e0edc13d38c40fd8cd03553e936969
-
SSDEEP
3072:AizePns3L9xZifkl4z7FxeAPozbUjissRK4OM17ARgz47/WJI0ol8mvpmW+ZbXm0:QK9xZiXeAAbm847/Wa8kEWeTTX1
Malware Config
Signatures
Files
-
Alerta correo sospechoso_RV_ Desinstalación de software no autorizado .msg.msg
-
http://geb.com.co
-
https://go.microsoft.com/fwlink/?Linkid=844050
-
https://go.microsoft.com/fwlink/p/?linkid=857875
-
https://outlook.office365.com/Encryption/lock.png
-
https://outlook.office365.com/owa/?viewmodel=ReadMessageItem&InternetMessageID=%3cBN6PR08MB3411E90818252601E2F3F866F2E3A%40BN6PR08MB3411.namprd08.prod.outlook.com%3e
-
https://outlook.office365.com/owa/?viewmodel=ReadMessageItem&InternetMessageID=%3cBN6PR08MB3411E90818252601E2F3F866F2E3A%40BN6PR08MB3411.namprd08.prod.outlook.com%3e
-
-
message.rpmsg