Static task
static1
Behavioral task
behavioral1
Sample
Correo Externo RV Permiso aceptado AIM Permiso #626124 Toreo Torre C SEYE 1 Actividades Operativas.msg
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Correo Externo RV Permiso aceptado AIM Permiso #626124 Toreo Torre C SEYE 1 Actividades Operativas.msg
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
Outlook-3ytjj5re.png
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
Outlook-3ytjj5re.png
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
app_logo.png
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
app_logo.png
Resource
win10v2004-20231215-en
General
-
Target
Correo Externo RV Permiso aceptado AIM Permiso #626124 Toreo Torre C SEYE 1 Actividades Operativas.msg
-
Size
123KB
-
MD5
cc8bafd6dbe75c1b832f9eb4f8ad5f98
-
SHA1
46ba537ace3a6ef485244825fad80b05e62a3cae
-
SHA256
a157385aa499cd4d32028b86007df0d4375ba00a4078d3e0a5ee441b9aea91e6
-
SHA512
07b3d8bde098253668a833af61e81ad7cb78db987f5ac10965c4f56a326d1603dc280f029a041ad3d87d86730d9deb378af0f9f750f254a3bb31533a8ad1ec76
-
SSDEEP
3072:0sMvw0DjUwtnrz9YQuUt3qh9/H+4GN0lGOkrWi:0sMvw0xn9nuUVqhTE0jkr
Malware Config
Signatures
Files
-
Correo Externo RV Permiso aceptado AIM Permiso #626124 Toreo Torre C SEYE 1 Actividades Operativas.msg.msg
-
http://aimmanager.com
-
http://grupoaxo.com
-
http://www.forcepoint.com
-
http://www.grupoaxo.com
-
https://danhos.aimmanager.com/images/app_logo=p.png
-
https://danhos.aimmanager.com/images/request_mailer_a=sets/approved.png
-
https://danhos.aimmanager.com/images/request_mailer_assets/approve=.png
-
https://danhos.aimmanager.com/images/request_mailer_assets/calenda=.png
-
https://danhos.aimmanager.com/images/request_mailer_assets/clock.p=g
-
https://danhos.aimmanager.com/images/request_mailer_assets/user.pn=
-
https://danhos.aimmanager.com/images/request_mailer_assets/users.p=g
-
https://mandrillapp.com/track=open.php?u=30872774&id=ddd874b3ccfa4a6699c8fa12520f99b6
-
https://mandrillapp.com/track=open.php?u=30872774&id=ddd874b3ccfa4a6699c8fa12520f99b6
-
http://immanager.com/authorization/main_requests/1bf28a70-8105-4534-8078-23542547=42b
-
http://nager.com/images/request_mailer_assets/approved.png
-
http://poaxo.com
-
http://www.gr
- Show all
-
-
Outlook-3ytjj5re.png.png
-
app_logo.png.png