General

  • Target

    Quarantined Messages (19).zip

  • Size

    224KB

  • MD5

    0d3cf52a56bd7ff13a191bcd23f88e58

  • SHA1

    e63ba60bde7ddd1960a3dd0e44ad8f868a980350

  • SHA256

    42f371a143c23fd20b24601fb19e94025c63267e9c7cf9a33f0af50406992947

  • SHA512

    743be627407c6c5ee660d75ec23bf39fd29da3c7e54987b743b0e56dc61c9d1e9994545ee22cc107fc93b8884c0baa416e323c43dfb9ec2d774b259a51ccbb76

  • SSDEEP

    6144:hYPIRd+Kh2dbqpU/whnp/gJJkOPdfKoPOmdOKgrZ2mqcF:GPIZubOxhmJJKo29Kgr7F

Score
1/10

Malware Config

Signatures

Files

  • Quarantined Messages (19).zip
    .zip

    Password: infected

  • 5a4f208c-42c2-4346-617e-08dbc36d4ad9/6b9bad9d-152e-ff59-28e1-08722e53b3ad.eml
    .eml
    • http://www.ultraflow.com

    • https://connect.intuit.com/portal/app/CommerceNetwork/view/scs-v1-5f0b3357bd5d4746a536b862ae84a73e832d1a8ad62c49188c034a2337773bfe965146854f764ebf974bfa76fe4c8a8e?locale=EN_US

    • https://security.intuit.com/privacy/

    • https://connect.intuit.com/html/TermsOfService.html

  • Inv_19483a_from_Ultra_Flow_14108.pdf
    .pdf
  • email-html-2.txt
    .html
  • email-plain-1.txt