Static task
static1
Behavioral task
behavioral1
Sample
Detained APSO Schedule KromeBTC 12112023.msg
Resource
win10v2004-20231130-en
Behavioral task
behavioral2
Sample
message_v2.rpmsg
Resource
win10v2004-20231130-en
General
-
Target
Detained APSO Schedule KromeBTC 12112023.msg
-
Size
268KB
-
MD5
1fa08f4abf353b6c598bfca85c67cd59
-
SHA1
77687d3b238c043db9bb9ff362c333b694e5c97f
-
SHA256
187dc621847fc97c89f881c3793c56388755a03cea8c1394ddf14f6799d3e7d5
-
SHA512
da61032f998c734c8558db229e0f2350b623e0228059ef1d1f9e16871bf84c5bf7ca08304ff96addf81d0aeccb3ce49ede5163a1b18a723ea761fe844a921ccb
-
SSDEEP
3072:hYG/017sp85K7Qfh8fqroju6AQZp/09i3ayC3hGe+xg7DRYBvbnSZNt9Oc:mG/0dsW5E1ju6AwR043jTxgRMnSft9O
Malware Config
Signatures
Files
-
Detained APSO Schedule KromeBTC 12112023.msg.msg
-
https://go.microsoft.com/fwlink/?Linkid=844050
-
https://go.microsoft.com/fwlink/p/?linkid=857875
-
https://outlook.office365.com/Encryption/lock.png
-
https://outlook.office365.com/owa/?viewmodel=ReadMessageItem&InternetMessageID=%3cDM8PR09MB66776B8AA0E0081ED57ED8A0CA8AA%40DM8PR09MB6677.namprd09.prod.outlook.com%3e
-
https://outlook.office365.com/owa/?viewmodel=ReadMessageItem&InternetMessageID=%3cDM8PR09MB66776B8AA0E0081ED57ED8A0CA8AA%40DM8PR09MB6677.namprd09.prod.outlook.com%3e
-
http://uscis.dhs.gov
-
-
message_v2.rpmsg