Static task
static1
Behavioral task
behavioral1
Sample
Correo sospechoso.msg
Resource
win7-20230831-es
Behavioral task
behavioral2
Sample
Correo sospechoso.msg
Resource
win10v2004-20230915-es
General
-
Target
Correo sospechoso.msg
-
Size
262KB
-
MD5
e279e2eac2175a9195c8f160d4b9fe20
-
SHA1
50850890a5b127a01fb356a5d06362e0b29d3b9c
-
SHA256
22a683df3faf3c809b468bf9b8734b7b16f2db90db410d60ca30458f0197f121
-
SHA512
45a8fe5efdf02c86575b236678e733d189d30af31c6b927c964a7dbd57da6fe7b32bf9187e8950b5d66d422487c9fdfe5a200db73f145b15168c5e357401c67d
-
SSDEEP
3072:JxiWd24uItquIctR7TTgRuNkAuNJp+F4267PnS:Z24uItquIctR7PgRuNJuNJh
Malware Config
Signatures
Files
-
Correo sospechoso.msg.msg
-
http://enlaza.red
-
https://aka.ms/LearnAboutSenderIdentification
-
https://commandcentre-ap-southeast-2-res.security.gallagher.cloud/mobile_redirect?template=NTE4MjU2OWQtNDY3YS1jNGM4LTIyNDYtZGI1NTZlNGYwZTUy&target=Z2dsY3JlZGVudGlhbDovL2NvbW1hbmRjZW50cmUtYXAtc291dGhlYXN0LTIuc2VjdXJpdHkuZ2FsbGFnaGVyLmNsb3VkL2FwaS9pbnZpdGF0aW9ucy9ORlMzLVlLMzktRFY2UC1NWFRG
-
https://commandcentre-ap-southeast-2-res.security.gallagher.cloud/mobile_redirect?template=NTE4MjU2OWQtNDY3YS1jNGM4LTIyNDYtZGI1NTZlNGYwZTUy&target=Z2dsY3JlZGVudGlhbDovL2NvbW1hbmRjZW50cmUtYXAtc291dGhlYXN0LTIuc2VjdXJpdHkuZ2FsbGFnaGVyLmNsb3VkL2FwaS9pbnZpdGF0aW9ucy9ORlMzLVlLMzktRFY2UC1NWFRG
-
https://itunes.apple.com/us/app/gallagher-mobile-connect/id1134751012
-
https://play.google.com/store/apps/details?id=com.gallagher.security.commandcentrecardholderapp
-
https://s3-ap-southeast-2.amazonaws.com/gallagher-commandcentre/app-store-badge.png
-
https://s3-ap-southeast-2.amazonaws.com/gallagher-commandcentre/google-play-badge.png
-
http://security.gallagher.cloud
-
-
image001.png.png