Static task
static1
Behavioral task
behavioral1
Sample
SuspiciousEmails.zip
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
SuspiciousEmails.zip
Resource
win10v2004-20230831-en
Behavioral task
behavioral3
Sample
POTENTIALLY SUSPICIOUS SHIP DATE Aug 29 2023.msg
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
POTENTIALLY SUSPICIOUS SHIP DATE Aug 29 2023.msg
Resource
win10v2004-20230831-en
Behavioral task
behavioral5
Sample
SHIP DATE Aug 29 2023.msg
Resource
win7-20230831-en
Behavioral task
behavioral6
Sample
SHIP DATE Aug 29 2023.msg
Resource
win10v2004-20230831-en
General
-
Target
SuspiciousEmails.zip
-
Size
103KB
-
MD5
4cfe8cce01140ab5b959e86676c670dc
-
SHA1
33dac8d5cae4d21c2943d24db9f216d9215205ed
-
SHA256
a5d180d842683fe1ec28f21b5bc674e26911b2bdb101463bcd821d2f2c9935c3
-
SHA512
a3ff72ef099f453bdfeb719378b5679397c89cb412560a7a9f37c99f2161dc89cdf7c0052bb080ce423e43807b7f5eae061135729e5ac60151c75509d1392416
-
SSDEEP
1536:BDBK5P/U/YvvWjoAKDvzrHXY/JKLu69d0CX2T06bBGOCJbIK469BZOlMfGFI1C0z:W+WnHI/JKLVytGOqIMVAAGchd5n
Malware Config
Signatures
Files
-
SuspiciousEmails.zip.zip
-
POTENTIALLY SUSPICIOUS SHIP DATE Aug 29 2023.msg.msg
-
http://.es-button.es
-
http://a.es
-
http://button.es
-
http://dcc.com
-
https://protect-au.mimecast.com/s/HMC2CXLKmJTnmYG3UXSqhP?domain=sfrh-glf.maillist-manage.com
-
https://protect-au.mimecast.com/s/LlS9CROA2zIrNLQ8sEYleu?domain=sfrh-glf.maillist-manage.com
-
https://protect-au.mimecast.com/s/U23qCVAGgEflMAX1fNtSlz?domain=sfrh-glf.maillist-manage.com
-
https://protect-au.mimecast.com/s/XCzXCWLJkGTj0BxviJBzUi?domain=sfrh-glf.maillist-manage.com
-
https://protect-au.mimecast.com/s/aVB-COMxVwsA3KwofjbCQQ?domain=sfrh-glf.maillist-manage.com
-
https://protect-au.mimecast.com/s/kNHHCQnzZyI67W9mUODzXK?domain=sfrh-glf.maillist-manage.com
-
https://protect-au.mimecast.com/s/vViXCP7yXxI4QxZqimUUGE?domain=sfrh-glf.maillist-manage.com
-
https://protect-au.mimecast.com/s/zmmLCMwvOrS5jZ9GH1MmrA?domain=sfrh-glf.maillist-manage.com
-
https://sfrh-glf.maillist-manage.com/click/1ffb6d05799749e9/open.gif
-
https://stratus.campaign-image.com/images/1151634000000046469_1_1693271172811_zcsclwgtfb2.png
-
https://stratus.campaign-image.com/images/1151634000000046469_2_1693271172873_zcsclwgttwt2.png
-
https://stratus.campaign-image.com/images/1151634000000046469_3_1693271172916_zcsclwgtlin2.png
-
https://stratus.campaign-image.com/images/1151634000000046469_4_1693271172966_zcsclwgtpin2.png
-
https://stratus.campaign-image.com/images/1151634000000046469_zc_v1_1693271063053_ngg.png
-
http://mailb10.zgph.zcsend.net
-
http://table.es
-
http://td.es
-
http://tr.es
-
http://turathwhawia.com
- Show all
-
-
SHIP DATE Aug 29 2023.msg.msg
-
http://.es-button.es
-
http://a.es
-
http://button.es
-
https://protect-au.mimecast.com/s/4JEXCXLKmJTnmYGxC94yfQ?domain=sfrh-glf.maillist-manage.com
-
https://protect-au.mimecast.com/s/88ElC5QZJDt0AGRVfAuGk3?domain=sfrh-glf.maillist-manage.com
-
https://protect-au.mimecast.com/s/B8e6C2xZz0sk7w6Ntv3nBY?domain=sfrh-glf.maillist-manage.com
-
https://protect-au.mimecast.com/s/M1dAC4QZEBtJr16pfzNBtg?domain=sfrh-glf.maillist-manage.com
-
https://protect-au.mimecast.com/s/VpyJC1WZxysp8YO7FmpXt1?domain=sfrh-glf.maillist-manage.com
-
https://protect-au.mimecast.com/s/ZNgECZYMqLuMzNx3tNyzfm?domain=sfrh-glf.maillist-manage.com
-
https://protect-au.mimecast.com/s/qyg3C3Q8BAtmZQx5Cj1DrN?domain=sfrh-glf.maillist-manage.com
-
https://protect-au.mimecast.com/s/vACfC6X1LEuoXKMnfDgfzM?domain=sfrh-glf.maillist-manage.com
-
https://sfrh-glf.maillist-manage.com/click/1ffb6d05799989a9/open.gif
-
https://stratus.campaign-image.com/images/1151634000000046469_1_1693271172811_zcsclwgtfb2.png
-
https://stratus.campaign-image.com/images/1151634000000046469_2_1693271172873_zcsclwgttwt2.png
-
https://stratus.campaign-image.com/images/1151634000000046469_3_1693271172916_zcsclwgtlin2.png
-
https://stratus.campaign-image.com/images/1151634000000046469_4_1693271172966_zcsclwgtpin2.png
-
https://stratus.campaign-image.com/images/1151634000000046469_zc_v1_1693271063053_ngg.png
-
http://table.es
-
http://td.es
-
http://tr.es
- Show all
-