Static task
static1
Behavioral task
behavioral1
Sample
invoice_3933.pdf
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
invoice_3933.pdf
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
invoice_4010.pdf
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
invoice_4010.pdf
Resource
win10v2004-20230915-en
Behavioral task
behavioral5
Sample
invoice_4092.pdf
Resource
win7-20230831-en
Behavioral task
behavioral6
Sample
invoice_4092.pdf
Resource
win10v2004-20230915-en
General
-
Target
Quarantined Messages (67).zip
-
Size
401KB
-
MD5
1ee1bc720fc7baa0fc566b02e4a7f2eb
-
SHA1
1b5ee8f375670ba00b54f60b63e4871a5ef93bce
-
SHA256
26810d6e36ef3efab9f6b7e850b8f2fd7e1c6349d95019ccd731ae52c9f3b952
-
SHA512
c4d6a1ad059a125160ee4c0f69b3d410a356c1a5ef438ea244c73c0798948e67d882567864e805c3528a4f440a8aad74f276a98621df70fd45d2a1bca1c7d5b4
-
SSDEEP
12288:Uh7oFBsCssfNwW5iOBnwgoYOgQVFJH5SYZMByxL:UaBsCssFL5BnwgoYX4JH5SYZMBUL
Malware Config
Signatures
Files
-
Quarantined Messages (67).zip.zip
Password: infected
-
51f30ba7-f966-4534-dbfc-08dbbb9e0501/160a4172-91f7-8f03-8970-de7e87eeb1ad.eml.eml
-
-
https://www.thebeerstore.ca/
-
https://goo.gl/maps/jvZCcchhAUChbpFH8
-
https://thebeergroup.sharepoint.com/sites/DIHub/SitePages/Women's-Initiative-Network.aspx
-
-
email-html-2.txt.html
-
email-plain-1.txt
-
image001.png.png
-
image002.png.png
-
image003.png.png
-
image004.png.png
-
image005.png.png
-
invoice_3933.pdf.pdf
-
invoice_4010.pdf.pdf
-
invoice_4092.pdf.pdf