Static task
static1
Behavioral task
behavioral1
Sample
Alerta Splunk TLP RED Access - UGPP - Posible Intento Reconocimiento Forticlient VPN - Rule.msg
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
Alerta Splunk TLP RED Access - UGPP - Posible Intento Reconocimiento Forticlient VPN - Rule.msg
Resource
win10v2004-20231023-en
General
-
Target
Alerta Splunk TLP RED Access - UGPP - Posible Intento Reconocimiento Forticlient VPN - Rule.msg
-
Size
768KB
-
MD5
36589d0ad4e2acc8db8d337250a658a1
-
SHA1
99d4d640cc1bdf47fa2eef6d9f5e017ee1c98a04
-
SHA256
39253e946ef63a5b6cb04d269280091f45ba677f81824e6f600f66a3f710ea83
-
SHA512
2091a33dd720b5edd2cc45188781cdbecfbb36df0e5bdd510607e7304d7c0f6660e1f8022a9a62b978376e5584e8c2040e3e7f4b4b9d51e83afa5e9397047a05
-
SSDEEP
12288:RzDHw4hDwLqLdDNtHCRVAvPTDlx6DZxolzoDqZ6WOctDcQ9Dg:trwLSdjKMTR4Vx+gq6WLq
Malware Config
Signatures
Files
-
Alerta Splunk TLP RED Access - UGPP - Posible Intento Reconocimiento Forticlient VPN - Rule.msg.msg
-
http://www.indracompany.com/
-
https://www.minsait.com
-
http://indracompany.com
-
http://tigerco.es
-
-
image001.png.png
-
image002.png.png
-
image003.png.png
-
image004.gif.gif
-
image005.png.png
-
image006.png.png
-
image007.png.png
-
image008.png.png
-
image009.png.png