Static task
static1
Behavioral task
behavioral1
Sample
ad2f7d31-61de-4b81-565f-08dbea1ef17f/0990da3c-5bde-ce87-ec4d-65df4e1dcb5e.eml
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
ad2f7d31-61de-4b81-565f-08dbea1ef17f/0990da3c-5bde-ce87-ec4d-65df4e1dcb5e.eml
Resource
win10v2004-20231023-en
General
-
Target
Quarantined Messages (9).zip
-
Size
6KB
-
MD5
9b8f81291a2f949780efcffc000e22e0
-
SHA1
c5729c65e57574446ddc96f6d3558fa9179b0404
-
SHA256
f5b9671b1af7823af80c2ff2a4b50f74ebb7494b2dd49be8cc19afcc0981d8b7
-
SHA512
f1a694b16558e38fc06a821ab84a00a2a63bd57ce7b827d05e5fcabee43449523b10ffd9cd39531f26566a8e6b11615a29589c1fc735d279b8fe44b7a2d22320
-
SSDEEP
96:PMk8cT7WKRgD5c/YtvJJWwCld25RE61uUValWNROD3yvz1dW8UokrFcTT8zYtd1S:kkXT7ytMwCYE1IRODCrTa8/tmJJ/VR
Malware Config
Signatures
Files
-
Quarantined Messages (9).zip.zip
Password: 1
-
ad2f7d31-61de-4b81-565f-08dbea1ef17f/0990da3c-5bde-ce87-ec4d-65df4e1dcb5e.eml.eml
Password: 1
-
https://extranet-acm-supply.gem-saas.com/login/?tab=code&code=ujC8tHccyrmZBcMlUROi5mUnN
-
https://www.paris2024.org/en/
-
https://mandrillapp.com/track/click/30702553/extranet-acm-supply.gem-saas.com?p=eyJzIjoiSzJMcGRSX3RUWTUyTk9mdnpINWowQWV6eWs4IiwidiI6MSwicCI6IntcInVcIjozMDcwMjU1MyxcInZcIjoxLFwidXJsXCI6XCJodHRwczpcXFwvXFxcL2V4dHJhbmV0LWFjbS1zdXBwbHkuZ2VtLXNhYXMuY29tXFxcL2xvZ2luXFxcLz90YWI9Y29kZSZjb2RlPXVqQzh0SGNjeXJtWkJjTWxVUk9pNW1Vbk5cIixcImlkXCI6XCI4MmNiYjRhNzEwOGM0NjNiOTViYTg5YmJhMjhiNTFhMVwiLFwidXJsX2lkc1wiOltcImI1MDcxZTkwOGJiYTIyNDRiMDAwMzU1YWRkYjU4ZjMzY2M0OGRiNTRcIl19In0
-
https://mandrillapp.com/track/click/30702553/ams.paris2024.org?p=eyJzIjoiVndtOVlTaU01ZUhkQUdvalZfTmQwemhkMUFvIiwidiI6MSwicCI6IntcInVcIjozMDcwMjU1MyxcInZcIjoxLFwidXJsXCI6XCJodHRwczpcXFwvXFxcL2Ftcy5wYXJpczIwMjQub3JnXFxcL2Fzc2V0c1xcXC9wZGZcXFwvZm9vdGVyXFxcL1BBUklTJTIwMjAyNCUyMC0lMjBBTVMlMjAtJTIwUHJpdmFjeSUyMFBvbGljeSUyMC0lMjAxNS0xMi0yMDIxJTIwLSUyMEVOLnBkZlwiLFwiaWRcIjpcIjgyY2JiNGE3MTA4YzQ2M2I5NWJhODliYmEyOGI1MWExXCIsXCJ1cmxfaWRzXCI6W1wiMzVkNmI3MmMyNzdjODhmYTA1MjY3NzFkNjhhODFkYTViYjU1MmExMFwiXX0ifQ
-
https://mandrillapp.com/track/click/30702553/www.paris2024.org?p=eyJzIjoiTHo2SGg1c0lBTFlhbTNrVXNOM2hPX3VYZjlJIiwidiI6MSwicCI6IntcInVcIjozMDcwMjU1MyxcInZcIjoxLFwidXJsXCI6XCJodHRwczpcXFwvXFxcL3d3dy5wYXJpczIwMjQub3JnXFxcL2VuXFxcL1wiLFwiaWRcIjpcIjgyY2JiNGE3MTA4YzQ2M2I5NWJhODliYmEyOGI1MWExXCIsXCJ1cmxfaWRzXCI6W1wiMzYzY2U3Mjg5NTUwOTcwZjlhNGFmODIyMjY1MDU0NjRjOWIzNzUwZlwiXX0ifQ
-
-
email-html-2.txt
-
email-plain-1.txt