Static task
static1
Behavioral task
behavioral1
Sample
Mailbox-Access Expiration.msg
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Mailbox-Access Expiration.msg
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
link-tracker.dat
Resource
win7-20230712-en
Behavioral task
behavioral4
Sample
link-tracker.dat
Resource
win10v2004-20230703-en
General
-
Target
Mailbox-Access Expiration.msg
-
Size
488KB
-
MD5
cbed6e326ecaa6c3b565d511e1783958
-
SHA1
3ca43455ea18688f916d4984dba32684411f8360
-
SHA256
f1ce3120e7d6e3103d655f68c7d0430fedabfe46fd526a4ea4299cf8dc63f8ef
-
SHA512
7b763985e550757f3fea7168e43ae31df663b0050e95c771b4a9858bc49c03b5252f0a575589aa3cd6b268669223959739d37e1eb738f9978573382603a3e173
-
SSDEEP
3072:ozEiZELVGH4V6HDHJA3ip1zhuQ6xaRgtyJmN7s6irdvcVECO6iyEiZaVCzM6HIpM:ozEiZELVGH8B2DK6LoW4BYOfBYO
Malware Config
Signatures
Files
-
Mailbox-Access Expiration.msg.msg
-
http://doublefirstmedical.com
-
https://aledari900.lt.emlnk.com/Prod/link-tracker?redirectUrl=aHR0cHMlM0ElMkYlMkZpcGZzLmlvJTJGaXBmcyUyRmJhZnliZWlhNXZqM3FyM3llbWQyeWI3bnpwbHM3c3Jpa2h1ZnBvanZpNG9ndmNsZTY1NW9hbXVvdHl5JTJGYWxsRG9tLmh0bWw%3D&a=%7C%7C612772896%7C%7C&account=aledari900.activehosted.com&email=yTGbd6JNQilrJa5VxKNb9Xyf30QGT1qUgo%2FhYoA%3D%3AUGDiP1iE4S0GVUqJB5LYy0ZirmNyd8Nm&s=cebd746684e33b65279e261fd8f585f9&i=1A3A1A1&sig=31oRPYBdygKVTaUY7PH4L6PHD26DPArMTLisMfchbNcE&iat=1692956573#[email protected]
-
https://aledari900.lt.emlnk.com/Prod/link-tracker?redirectUrl=aHR0cHMlM0ElMkYlMkZpcGZzLmlvJTJGaXBmcyUyRmJhZnliZWlhNXZqM3FyM3llbWQyeWI3bnpwbHM3c3Jpa2h1ZnBvanZpNG9ndmNsZTY1NW9hbXVvdHl5JTJGYWxsRG9tLmh0bWw%3D&a=%7C%7C612772896%7C%7C&account=aledari900.activehosted.com&email=yTGbd6JNQilrJa5VxKNb9Xyf30QGT1qUgo%2FhYoA%3D%3AUGDiP1iE4S0GVUqJB5LYy0ZirmNyd8Nm&s=cebd746684e33b65279e261fd8f585f9&i=1A3A1A1&sig=31oRPYBdygKVTaUY7PH4L6PHD26DPArMTLisMfchbNcE&iat=1692956573#[email protected]
-
-
link-tracker.dat