Overview
overview
3Static
static
3Mensajes e...5).zip
windows7-x64
1Mensajes e...5).zip
windows10-2004-x64
18e235049-b...6c.eml
windows7-x64
18e235049-b...6c.eml
windows10-2004-x64
31. ACTA DI...24.pdf
windows7-x64
11. ACTA DI...24.pdf
windows10-2004-x64
120246200088683.pdf
windows7-x64
120246200088683.pdf
windows10-2004-x64
13. ACTA DI...24.pdf
windows7-x64
13. ACTA DI...24.pdf
windows10-2004-x64
14. 20246200088683.pdf
windows7-x64
14. 20246200088683.pdf
windows10-2004-x64
1=?UTF-8?Q?...os.pdf
windows7-x64
1=?UTF-8?Q?...os.pdf
windows10-2004-x64
1=?UTF-8?Q?...os.pdf
windows7-x64
1=?UTF-8?Q?...os.pdf
windows10-2004-x64
1ACTA DISPO...24.pdf
windows7-x64
1ACTA DISPO...24.pdf
windows10-2004-x64
1email-html-2.html
windows7-x64
1email-html-2.html
windows10-2004-x64
1email-plain-1.txt
windows7-x64
1email-plain-1.txt
windows10-2004-x64
1image001.png
windows7-x64
3image001.png
windows10-2004-x64
3image003.png
windows7-x64
3image003.png
windows10-2004-x64
3Behavioral task
behavioral1
Sample
Mensajes en cuarentena (5).zip
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
Mensajes en cuarentena (5).zip
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
8e235049-bfe4-4d05-eb85-08dc0ccfaa62/f4703ceb-0fde-0b6d-7dfe-0fb2821afc6c.eml
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
8e235049-bfe4-4d05-eb85-08dc0ccfaa62/f4703ceb-0fde-0b6d-7dfe-0fb2821afc6c.eml
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
1. ACTA DISPONIBILIDAD INICIAL 2024.pdf
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
1. ACTA DISPONIBILIDAD INICIAL 2024.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
20246200088683.pdf
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
20246200088683.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
3. ACTA DISPONIBILIDAD INICIAL 2024.pdf
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
3. ACTA DISPONIBILIDAD INICIAL 2024.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
4. 20246200088683.pdf
Resource
win7-20231129-en
Behavioral task
behavioral12
Sample
4. 20246200088683.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
=?UTF-8?Q?2._Solicitud_Liberacio=CC=81n_Saldos.pdf
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
=?UTF-8?Q?2._Solicitud_Liberacio=CC=81n_Saldos.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
=?UTF-8?Q?Solicitud_Liberaci=C3=B3n_Saldos.pdf
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
=?UTF-8?Q?Solicitud_Liberaci=C3=B3n_Saldos.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
ACTA DISPONIBILIDAD INICIAL 2024.pdf
Resource
win7-20231129-en
Behavioral task
behavioral18
Sample
ACTA DISPONIBILIDAD INICIAL 2024.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
email-html-2.html
Resource
win7-20231129-en
Behavioral task
behavioral20
Sample
email-html-2.html
Resource
win10v2004-20231215-en
Behavioral task
behavioral21
Sample
email-plain-1.txt
Resource
win7-20231215-en
Behavioral task
behavioral22
Sample
email-plain-1.txt
Resource
win10v2004-20231215-en
Behavioral task
behavioral23
Sample
image001.png
Resource
win7-20231215-en
Behavioral task
behavioral24
Sample
image001.png
Resource
win10v2004-20231215-en
Behavioral task
behavioral25
Sample
image003.png
Resource
win7-20231215-en
Behavioral task
behavioral26
Sample
image003.png
Resource
win10v2004-20231222-en
General
-
Target
Mensajes en cuarentena (5).zip
-
Size
3.6MB
-
MD5
b1e0f470ffda6a615e7a225904502504
-
SHA1
729dcab55708806dec5aee11528dc2fa80257116
-
SHA256
4a2fd3c26200712c120dfc66328bfb9fea8376955fff428efcdb3efe30fabd8b
-
SHA512
bcf12b54dd901e59c7fe19ce6d00175da0c946eb1d43a0d6df540daf03ce9047d72035ed5501ae05725dbdaae68bea0175212d9d4c467ace8c73ab6dd115b9ec
-
SSDEEP
98304:Xs0TyyZl8GskH42DUUXq9xF3n1xUmgxdAt8kVJuMnCnlqx6:c0+GV42g061Q2RUlqQ
Malware Config
Signatures
Files
-
Mensajes en cuarentena (5).zip.zip
Password: 22
-
8e235049-bfe4-4d05-eb85-08dc0ccfaa62/f4703ceb-0fde-0b6d-7dfe-0fb2821afc6c.eml.eml
Password: 22
-
http://www.adres.gov.co/
-
-
1. ACTA DISPONIBILIDAD INICIAL 2024.pdf.pdf
Password: 22
-
20246200088683.pdf.pdf
Password: 22
-
3. ACTA DISPONIBILIDAD INICIAL 2024.pdf.pdf
Password: 22
-
4. 20246200088683.pdf.pdf
Password: 22
-
=?UTF-8?Q?2._Solicitud_Liberacio=CC=81n_Saldos.pdf?=.pdf
Password: 22
-
=?UTF-8?Q?Solicitud_Liberaci=C3=B3n_Saldos.pdf?=.pdf
Password: 22
-
ACTA DISPONIBILIDAD INICIAL 2024.pdf.pdf
Password: 22
-
http://es-CO2.es
-
http://es-CO3.es
-
-
email-html-2.txt.html
-
email-plain-1.txt
-
image001.png.png
-
image003.png.png