Static task
static1
Behavioral task
behavioral1
Sample
Emily Freed shared _Document5_ with you.eml (33.8 KB).msg
Resource
win10v2004-20231215-en
Behavioral task
behavioral2
Sample
Emily Freed shared _Document5_ with you.eml (33.8 KB).msg
Resource
win11-20231222-en
Behavioral task
behavioral3
Sample
AttachedImage.png
Resource
win10v2004-20231215-en
Behavioral task
behavioral4
Sample
AttachedImage.png
Resource
win11-20231215-en
General
-
Target
Emily Freed shared _Document5_ with you.eml (33.8 KB).msg
-
Size
55KB
-
MD5
8cee5b31ac111ecc9ed9c51ef4e32702
-
SHA1
6ac3f8e3943c3dfcfd37270efc74cf2a6b0f7a28
-
SHA256
a2ed482a360acaf6195d69767ecea3159c7720f9bae7e156968ae97b1ae2afc9
-
SHA512
c9767709b6a0742e4ff9ec9b68c7cb7c91f5ec3f5fea69cbfb13171d6fe04d030dea5dd8320600f9e4c1e7cf0561a09513e0c5db4fcafdd7560bc576df7154c0
-
SSDEEP
768:2G4uGgMO77h54cjDeU8RDIwQIwIhaMkvO2KyNUrRNOnl9l96m7Rq0cfjXZw:R4cuUwFwMaM6Oxh+nn6ORq3DZ
Malware Config
Signatures
Files
-
Emily Freed shared _Document5_ with you.eml (33.8 KB).msg.msg
-
http://40familyservicesinc.net
-
https://aadcdn.msftauthimages.net
-
https://aka.ms/privacy
-
https://eastusr-notifyp.svc.ms:443/api/v2/tracking/method/View?mi=_M0IkwESgUC6OuZjgy5wSg
-
https://familyservicesinc-my.sharepoint.com/:w:/g/personal/efreed_familyservicesinc_net/ETS1-DUokghGiMEwopaDO2gB5_BeYJDgyicoCCiw3q8XBw?e=4%3aJyUOZY&fromShare=true&at=9
-
https://familyservicesinc-my.sharepoint.com/:w:/g/personal/efreed_familyservicesinc_net/ETS1-DUokghGiMEwopaDO2gB5_BeYJDgyicoCCiw3q8XBw?e=4%3aJyUOZY&fromShare=true&at=9
-
https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-westeuropean/segoeui-light.ttf
-
https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-westeuropean/segoeui-light.woff
-
https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-westeuropean/segoeui-light.woff2
-
https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-westeuropean/segoeui-regular.ttf
-
https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-westeuropean/segoeui-regular.woff
-
https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-westeuropean/segoeui-regular.woff2
-
https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-westeuropean/segoeui-semibold.ttf
-
https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-westeuropean/segoeui-semibold.woff
-
https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-westeuropean/segoeui-semibold.woff2
-
https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-westeuropean/segoeui-semilight.ttf
-
https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-westeuropean/segoeui-semilight.woff
-
https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-westeuropean/segoeui-semilight.woff2
-
https://nam12.safelinks.protection.outlook.com/?url=https*3A*2F*2Faka.ms*2Fprivacy&data=05*7C02*7Cefreed*40familyservicesinc.net*7C314e055c4e3a42fc1eb208dc111ae2f0*7Cbabc7350777f40f3b4ac648e22edf7cc*7C0*7C0*7C638404054407089743*7CUnknown*7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0*3D*7C3000*7C*7C*7C&sdata=EyjpgPSK9J8sB5WnYg3Na8eDGkovcmWIdQihtzufmxI*3D&reserved=0
-
https://nam12.safelinks.protection.outlook.com/?url=https*3A*2F*2Faka.ms*2Fprivacy&data=05*7C02*7Cefreed*40familyservicesinc.net*7C314e055c4e3a42fc1eb208dc111ae2f0*7Cbabc7350777f40f3b4ac648e22edf7cc*7C0*7C0*7C638404054407089743*7CUnknown*7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0*3D*7C3000*7C*7C*7C&sdata=EyjpgPSK9J8sB5WnYg3Na8eDGkovcmWIdQihtzufmxI*3D&reserved=0
-
https://nam12.safelinks.protection.outlook.com/ap/w-59584e83/?url=https*3A*2F*2Ffamilyservicesinc-my.sharepoint.com*2F*3Aw*3A*2Fg*2Fpersonal*2Fefreed_familyservicesinc_net*2FETS1-DUokghGiMEwopaDO2gB5_BeYJDgyicoCCiw3q8XBw*3Fe*3D4*253aJyUOZY*26fromShare*3Dtrue*26at*3D9&data=05*7C02*7Cefreed*40familyservicesinc.net*7C314e055c4e3a42fc1eb208dc111ae2f0*7Cbabc7350777f40f3b4ac648e22edf7cc*7C0*7C0*7C638404054407089743*7CUnknown*7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0*3D*7C3000*7C*7C*7C&sdata=JuRNwwoWKdjGfkvcPwSHBqonzuX4w71oVc4Yx4snAzk*3D&reserved=0
-
https://nam12.safelinks.protection.outlook.com/ap/w-59584e83/?url=https*3A*2F*2Ffamilyservicesinc-my.sharepoint.com*2F*3Aw*3A*2Fg*2Fpersonal*2Fefreed_familyservicesinc_net*2FETS1-DUokghGiMEwopaDO2gB5_BeYJDgyicoCCiw3q8XBw*3Fe*3D4*253aJyUOZY*26fromShare*3Dtrue*26at*3D9&data=05*7C02*7Cefreed*40familyservicesinc.net*7C314e055c4e3a42fc1eb208dc111ae2f0*7Cbabc7350777f40f3b4ac648e22edf7cc*7C0*7C0*7C638404054407089743*7CUnknown*7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0*3D*7C3000*7C*7C*7C&sdata=JuRNwwoWKdjGfkvcPwSHBqonzuX4w71oVc4Yx4snAzk*3D&reserved=0
-
https://nam12.safelinks.protection.outlook.com/ap/w-59584e83/?url=https*3A*2F*2Ffamilyservicesinc-my.sharepoint.com*2F*3Aw*3A*2Fg*2Fpersonal*2Fefreed_familyservicesinc_net*2FETS1}
-
http://nam12.safelinks.protection.outlook.com
- Show all
-
-
AttachedImage.png.png