Static task
static1
Behavioral task
behavioral1
Sample
TR W23-345-9 TR 22 PARTNER ID 10023962 - Suivi des activations en attente.msg
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
TR W23-345-9 TR 22 PARTNER ID 10023962 - Suivi des activations en attente.msg
Resource
win10v2004-20231127-en
Behavioral task
behavioral3
Sample
message_v2.rpmsg
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
message_v2.rpmsg
Resource
win10v2004-20231130-en
General
-
Target
TR W23-345-9 TR 22 PARTNER ID 10023962 - Suivi des activations en attente.msg
-
Size
1.3MB
-
MD5
ca959d71ec627027341660f41d906bba
-
SHA1
9ee6eac818d0d20b737e8e67f46a9b40f1784dc4
-
SHA256
c43c2da09fb669fb54e07cfa36ce21dffc37ec058c4154410995c6dc1e19961c
-
SHA512
37b6b3add45c396324aa27f4f531917ef45304eb5a4404d8e4428614c7d48a0374885ee1b13a75673d767584b7cd0c58e9152afda2b786344f861f3297aa11d9
-
SSDEEP
24576:NujqLXQpIhkoLDl8+r1tCAK9aDs+UJFPG4m6e7u82EK6z6:NumLXQpIhkoLDl8+JtOERUJYb66u8I6z
Malware Config
Signatures
Files
-
TR W23-345-9 TR 22 PARTNER ID 10023962 - Suivi des activations en attente.msg.msg
-
https://go.microsoft.com/fwlink/?Linkid=844050
-
https://go.microsoft.com/fwlink/p/?linkid=857875
-
https://outlook.office365.com/Encryption/lock.png
-
https://outlook.office365.com/owa/?viewmodel=ReadMessageItem&InternetMessageID=%3cAM0PR05MB4097A220E5760D52F579B9F5E78EA%40AM0PR05MB4097.eurprd05.prod.outlook.com%3e
-
https://outlook.office365.com/owa/?viewmodel=ReadMessageItem&InternetMessageID=%3cAM0PR05MB4097A220E5760D52F579B9F5E78EA%40AM0PR05MB4097.eurprd05.prod.outlook.com%3e
-
http://socgen.com
-
-
message_v2.rpmsg