Static task
static1
Behavioral task
behavioral1
Sample
Invoice2828-PO-ORDER.eml
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Invoice2828-PO-ORDER.eml
Resource
win10v2004-20231222-en
General
-
Target
Invoice2828-PO-ORDER.rar
-
Size
17KB
-
MD5
18eab73f5db43d22a3dbd04300ff4431
-
SHA1
39329d18bb29b48da11c76d509182dc3008e6461
-
SHA256
d275f45d692a0a339b25ff5f70009fa2944fe0e4df9f64ebc5e98f2c27225484
-
SHA512
747bf19d37ee4063ca80de4cb7ef498224ef64c6860276575d8afa9d4dc9dd678869488a46028b6487fff06a79b5101c4ade36062ff46a3b6c0dd0440d2c8156
-
SSDEEP
384:tEtZ9XZBKo7BRqAuZIrTOk9RA8RqiC61nvQNDUPf+U0:tEnbYYFqiClZUPF0
Malware Config
Signatures
Files
-
Invoice2828-PO-ORDER.rar.rar
Password: dfi34i2k3o2%&*
-
Invoice2828-PO-ORDER.eml.eml
Password: dfi34i2k3o2%&*
-
https://my.visme.co/view/90pry3x6-afi-ltd#s1
-
https://northeuroper-notifyp.svc.ms/api/v2/tracking/method/Click?mi=0WaQG4ssnU6UvoYUPz4Qkg&tc=PrivacyStatement&cs1=e904d62807d7d8a08355e9a7a50afb8d836b2e5907b97e0fba743b3318254399&cs2=5bdf4fe521e4d0302e10dee4b668265dd585c394cc2a679eabf178a2bc8735d0&ru=
-
http://www.afi.es/
-
https://northeuroper-notifyp.svc.ms/api/v2/tracking/method/Click?mi=0WaQG4ssnU6UvoYUPz4Qkg&tc=PrivacyStatement&cs1=e904d62807d7d8a08355e9a7a50afb8d836b2e5907b97e0fba743b3318254399&cs2=5bdf4fe521e4d0302e10dee4b668265dd585c394cc2a679eabf178a2bc8735d0&ru=https%3a%2f%2fprivacy.microsoft.com%2fprivacystatement%5c
-
-
Outlook-vctivall.png.png
Password: dfi34i2k3o2%&*
-
email-html-2.txt.html
-
email-plain-1.txt