Static task
static1
Behavioral task
behavioral1
Sample
invoice_3933.pdf
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
invoice_3933.pdf
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
invoice_4010.pdf
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
invoice_4010.pdf
Resource
win10v2004-20230915-en
Behavioral task
behavioral5
Sample
invoice_4092.pdf
Resource
win7-20230831-en
Behavioral task
behavioral6
Sample
invoice_4092.pdf
Resource
win10v2004-20230915-en
General
-
Target
Quarantined Messages (11).zip
-
Size
401KB
-
MD5
95035b0fcf5340ab11a14990ad7e6997
-
SHA1
48bc522da30fb05d84f7bac9cfde9706df6f6b7d
-
SHA256
60fc24facf1be616d8c3f1b7950ba33780733ef4bf3f288a86585ef80f94f2a6
-
SHA512
fb87d0a0e2b8b56f2bbb6acd4d1e8a3212c7554b34ee0904c5fbb7cdfa02d1fd45ba407c668284dccbc734e3cbd40bd37bc83a7d0b1a9f1c19c1b56197d6c887
-
SSDEEP
12288:i8wrFv3u4HjD5GWe7daBc9P33ucOIhzHpuYM2wkvjRO6:crFPxjc/5aBMP3hpLM2wSjB
Malware Config
Signatures
Files
-
Quarantined Messages (11).zip.zip
Password: infected
-
51f30ba7-f966-4534-dbfc-08dbbb9e0501/160a4172-91f7-8f03-8970-de7e87eeb1ad.eml.eml
-
-
https://www.thebeerstore.ca/
-
https://goo.gl/maps/jvZCcchhAUChbpFH8
-
https://thebeergroup.sharepoint.com/sites/DIHub/SitePages/Women's-Initiative-Network.aspx
-
-
email-html-2.txt.html
-
email-plain-1.txt
-
image001.png.png
-
image002.png.png
-
image003.png.png
-
image004.png.png
-
image005.png.png
-
invoice_3933.pdf.pdf
-
invoice_4010.pdf.pdf
-
invoice_4092.pdf.pdf