Behavioral task
behavioral1
Sample
d6564dee-17a5-261b-7a60-4a9bd7411672.eml
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
d6564dee-17a5-261b-7a60-4a9bd7411672.eml
Resource
win10v2004-20231023-en
General
-
Target
d6564dee-17a5-261b-7a60-4a9bd7411672.eml
-
Size
454KB
-
MD5
9e2a7a4b97789367aba15b6093561854
-
SHA1
7b5ae82ce51eb2ad9dc82dd8f933861613595e8e
-
SHA256
69297819d0edc330b79b091c62824779c532bb1036576527817abf045efd4f7b
-
SHA512
38cb4e8ac32c68b22c4538d1edb735c35292adf86a369f5191a39dc90e938e028da5b6f58bb9b09624ca417e190027d2366529eb5fb616f7cb3bc04f00e9b6f3
-
SSDEEP
12288:g2icvh5OUnFIiD609ZBUo3wUV99ip/sYBOsF+Ss:/RFIiD609ZVn6T0s0Ss
Malware Config
Signatures
Files
-
d6564dee-17a5-261b-7a60-4a9bd7411672.eml.eml
-
https://aka.ms/LearnAboutSenderIdentification
-
http://www.cisalpinatours.it/
-
https://cisalpinatours.it/aggiornamenti-regole-viaggio/
-
https://www.booking.com/index.it.html?aid=958448;conf_email_logo=1&
-
https://secure.booking.com/confirmation.it.html?aid=958448;auth_key=0AXaYwLfGuY3dlfh&;pbtrack=email_mainCTA;from_conf_email_tracking=1
-
https://www.booking.com/hotel/gb/innside-by-melia-newcastle.html?aid=958448&label=postbooking_confemail;pbsource=conf_email_hotel_name
-
http://www.booking.com/directions.it.html?hotel_id=6762311&aid=958448
-
https://secure.booking.com/mybooking.it.html?aid=958448;bn=4169545365;pincode=3269&;source=conf_email;pbsource=conf_email_modify#gallery
-
https://secure.booking.com/confirmation.it.html?aid=958448;auth_key=0AXaYwLfGuY3dlfh&;source=conf_email;pbsource=conf_email_modify;label=conf_email_print;pbtrack=email_print_btn;from_conf_email_tracking=1
-
https://secure.booking.com/mybooking.it.html?aid=958448;bn=4169545365;pincode=3269&;pbsource=email_checkinTime
-
https://secure.booking.com/mybooking.it.html?aid=958448;bn=4169545365;pincode=3269&;pbsource=email_changeRequests
-
https://secure.booking.com/confirmation.it.html?aid=958448;auth_key=0AXaYwLfGuY3dlfh&;pbsource=email_securityDesktop;from_conf_email_tracking=1
-
https://secure.booking.com/mybooking.it.html?aid=958448;bn=4169545365;pincode=3269&;pbsource=email_changeInfo;pbtrack=guest_details_link#roomSection
-
https://secure.booking.com/mybooking.it.html?aid=958448;bn=4169545365;pincode=3269&;source=email_changeInfo;rres_id=4576404967;pbtrack=guest_details_link#roomSection
-
https://secure.booking.com/mybooking.it.html?aid=958448;bn=4169545365;pincode=3269&;source=email_cancel;open=email_cancel;open_room=4576404967;
-
https://secure.booking.com/mybooking.it.html?aid=958448;bn=4169545365;pincode=3269&;pbsource=email_changeccdetails
-
https://secure.booking.com/confirmation.it.html?aid=958448;bn=4169545365;pincode=3269&;from_confemail_booking_conditions_redirect=3#hotel_room_details
-
https://secure.booking.com/confirmation.it.html?aid=958448;auth_key=0AXaYwLfGuY3dlfh&;source=conf_email;pbsource=email_view;pbcustom=1;from_conf_email_tracking=1
-
https://secure.booking.com/confirmation.it.html?aid=958448;auth_key=0AXaYwLfGuY3dlfh&;source=conf_email;pbsource=email_change;pbcustom=1;from_conf_email_tracking=1
-
https://www.booking.com/trust-and-safety/travellers.it.html?aid=958448&utm_source=rc_link&utm_medium=mg_confirmation#safety-tips
-
https://www.booking.com/trust-and-safety/travellers.it.html?aid=958448&utm_source=rc_link&utm_medium=mg_confirmation&cc1=gb
-
https://www.booking.com/content/privacy.it.html?aid=958448
- Show all
-
-
ATT00001.png.png
-
ATT00002.png.png
-
ATT00003.png.png
-
ATT00004.png.png
-
ATT00005.png.png
-
ATT00006.png.png
-
ATT00007.png.png
-
ATT00008.png.png
-
ATT00009.jpg
-
ATT00010.png.png
-
Outlook-jj3rg222.png.png
-
email-html-2.txt.html
-
email-plain-1.txt
-
staPdfAidaAirplus_1700124826142.pdf.pdf
-
https://cdctokencisa.siapcn.it/Tokenizer/showcdc?crypted=YnlONVhpSStEM0hjRXduRExxQk1neUpZM09SNzNKODJ5aXF6c2Q3eHdqM0g4bE4ycXNvT1gybXplOTZpN1J5QjlaSGVJcDV3VE5VSgpmWTdXUDNac3pRc2UzanhLUmxlc2g0TjRMRWxZL21PN3JVSEwxVUgwb0VEczJtTTZ6bEgrWmduNCtEc1hvWEhIcExjelgzRkU0TCtzCkhmU0RCMFdWVDl2N1g3cm5LYWdnVmZRZE15dTNyY3UwR0tNMUZDd1F2TnlqbHpNTTlLRTRTS3lqVm9qSEN1cEhrcDh1WnQvbjlraXMKaW1SVjFMVkNsNXd5Ky9PeStJQzBDdVRZNy8zYnBpRUtpcTNUWXI5NGthM2xnQW9YSzdDekZienZoUFlxc0xtcjhFT0hhUk5wN1J3bQpaaWhNV25RUjlYWVh5S01UOW5BR0RnUTludDNGUHVkTmkyZWplMC9MYkREaEppV2NSbXRMNDcxUkZxY2VjelRVNWh6akRETHZHVjZlCmYzSm56Q2h1WE5xT1RYcHRRZVYzS2RFWElIZlR1bkI4ZzJNamVaRzB4U1IveExuSlExc3VERmcwSVZuRDErOS9TbkViY1M1MUNqYWwKb0dkelVPQzhSUkFBeXhoWVFyK3ZZZzljVTF4bEc4eFFHY3F5NWwrZ3VuSkx6U29LSitPQXBtWVNwM3E4OHJkYmJCNy8zUmM5ek1qTApBVE1mcnNHRExZQzdzSTNCTEduUzJNWHI1TkVTd1Foc0xaQjRpQW16bTdsUTdVc2hLRDc5ZGEydktkMWZUcUxrbXc9PQ==
-
http://www.airplus.com
-