Static task
static1
Behavioral task
behavioral1
Sample
Inv_19483a_from_Ultra_Flow_14108.pdf
Resource
win10v2004-20230915-en
Behavioral task
behavioral2
Sample
email-html-2.html
Resource
win10v2004-20230915-en
General
-
Target
Quarantined Messages (19).zip
-
Size
224KB
-
MD5
0d3cf52a56bd7ff13a191bcd23f88e58
-
SHA1
e63ba60bde7ddd1960a3dd0e44ad8f868a980350
-
SHA256
42f371a143c23fd20b24601fb19e94025c63267e9c7cf9a33f0af50406992947
-
SHA512
743be627407c6c5ee660d75ec23bf39fd29da3c7e54987b743b0e56dc61c9d1e9994545ee22cc107fc93b8884c0baa416e323c43dfb9ec2d774b259a51ccbb76
-
SSDEEP
6144:hYPIRd+Kh2dbqpU/whnp/gJJkOPdfKoPOmdOKgrZ2mqcF:GPIZubOxhmJJKo29Kgr7F
Malware Config
Signatures
Files
-
Quarantined Messages (19).zip.zip
Password: infected
-
5a4f208c-42c2-4346-617e-08dbc36d4ad9/6b9bad9d-152e-ff59-28e1-08722e53b3ad.eml.eml
-
http://www.ultraflow.com
-
https://connect.intuit.com/portal/app/CommerceNetwork/view/scs-v1-5f0b3357bd5d4746a536b862ae84a73e832d1a8ad62c49188c034a2337773bfe965146854f764ebf974bfa76fe4c8a8e?locale=EN_US
-
https://security.intuit.com/privacy/
-
https://connect.intuit.com/html/TermsOfService.html
-
-
Inv_19483a_from_Ultra_Flow_14108.pdf.pdf
-
email-html-2.txt.html
-
email-plain-1.txt