Overview
overview
5Static
static
5Mensajes e...2).zip
windows7-x64
1Mensajes e...2).zip
windows10-2004-x64
1781fb5de-8...49.eml
windows7-x64
1781fb5de-8...49.eml
windows10-2004-x64
3attachment-3.pdf
windows7-x64
1attachment-3.pdf
windows10-2004-x64
1email-html-2.html
windows7-x64
1email-html-2.html
windows10-2004-x64
1email-plain-1.txt
windows7-x64
1email-plain-1.txt
windows10-2004-x64
1Behavioral task
behavioral1
Sample
Mensajes en cuarentena (2).zip
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Mensajes en cuarentena (2).zip
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
781fb5de-8012-4db6-3fb2-08dc0320e6f3/73016801-2546-e944-7b2b-0f0bc4155649.eml
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
781fb5de-8012-4db6-3fb2-08dc0320e6f3/73016801-2546-e944-7b2b-0f0bc4155649.eml
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
attachment-3.pdf
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
attachment-3.pdf
Resource
win10v2004-20231222-en
Behavioral task
behavioral7
Sample
email-html-2.html
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
email-html-2.html
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
email-plain-1.txt
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
email-plain-1.txt
Resource
win10v2004-20231215-en
General
-
Target
Mensajes en cuarentena (2).zip
-
Size
30KB
-
MD5
80debe637e6eec16355d8301491bf11b
-
SHA1
055df344cc1aedec8d22a1956f253e830c69e4d3
-
SHA256
d4b10dae05e2e663d211547b5f4651c50189b5fa3772f442c8497b4639aab7be
-
SHA512
578456577221b07550c8519a06eef2c2408c5ef842aa062f1ef69da497d6580cbcf245737dd4a906bc0a67e8edde9332018ef82f74b2b0238bb81d61250849c2
-
SSDEEP
768:ognp60jwA0n9PisHTGKCPx5plvtsXU1oqzPXJ:FQ0jwpn9ny5bFkUaqjJ
Malware Config
Signatures
-
Malformed data in PDF
A PDF can contain malformed data to evade detection
Files
-
Mensajes en cuarentena (2).zip.zip
Password: 22
-
781fb5de-8012-4db6-3fb2-08dc0320e6f3/73016801-2546-e944-7b2b-0f0bc4155649.eml.eml
Password: 22
-
https://sufi.grupobancolombia.com/sufi/servicios/canales-de-pago
-
https://wa.me/573187528722
-
http://www.sufi.com.co
-
https://www.grupobancolombia.com/wps/portal/acerca-de/[email protected]
-
https://www.facebook.com/sufitepresta/
-
https://www.instagram.com/consufi/
-
https://sufi.grupobancolombia.com/wps/portal/sufi/servicios/audio-sufi
-
-
attachment-3.pdf
-
email-html-2.txt.html
-
email-plain-1.txt