RE FBP 10[.]01[.]24[.]msg

Resubmissions

11/01/2024, 18:28

240111-w4bk4adgcl 5

11/01/2024, 18:09

240111-wrhhwadeap 5

Sharing

Copy URL

Twitter E-mail

General

Target

RE FBP 10.01.24.msg
Size

440KB
MD5

8c3afa4b2e835f1fa1ac230bb49e3119
SHA1

6faa0d470c0662786b8291e4d2edcc7eb3585244
SHA256

895d18001d23d34ec3e7f1ee41bd68eb1b007c8d7fd86f482dcb16f0ff41303d
SHA512

6cacdb475e96cb9e7f99b7c2fa1b65611dffcdde97750d3a9f813e2ad5b50c3dcba741e7b3a5b4beb3592d070fb41fe74608ef6266bd534559bee10b77481164
SSDEEP

6144:vawOp4YTKhxC4hf1Yu7abHIBWmOp8UJ4oPfNfoDXfoqJAehbmbo:9Ysf1F7JBWmOuURfNfoDgehib

Score

1^/10

Malware Config

Signatures

Files

RE FBP 10.01.24.msg
.msg
- http://hoorayhealth.com
- https://go.microsoft.com/fwlink/?Linkid=844050
- https://go.microsoft.com/fwlink/p/?linkid=857875
- https://outlook.office365.com/Encryption/lock.png
- https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=soc%40dkbinnovative.net&senderemailaddress=ccooper%40siskiyoucu.org&senderorganization=AwGEAAAAAoAAAAADAQAAAJWynkaoNeRCq8ue2vXBepBPVT1zaXNraXlvdWN1MzY1Lm9ubWljcm9zb2Z0LmNvbSxPVT1NaWNyb3NvZnQgRXhjaGFuZ2UgSG9zdGVkIE9yZ2FuaXphdGlvbnMsREM9TkFNUFIxN0EwMDcsREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTQ1aPTi47bdMlQMa3ANfYMRDTj1Db25maWd1cmF0aW9uLENOPXNpc2tpeW91Y3UzNjUub25taWNyb3NvZnQuY29tLENOPUNvbmZpZ3VyYXRpb25Vbml0cyxEQz1OQU1QUjE3QTAwNyxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NAQ%3d%3d&messageid=%3cPH7PR16MB5949F23421230AC77A7BAD2AA9682%40PH7PR16MB5949.namprd16.prod.outlook.com%3e&cfmRecipient=SystemMailbox%7b0AF09B7F-434F-4B2F-9CBC-57639EDCFD9C%7d%40siskiyoucu365.onmicrosoft.com&consumerEncryption=false&senderorgid=b9bd677d-660d-4e30-a5ee-994f005fea65&urldecoded=1&e4e_sdata=n6OmHhZw2uJIfoZVjxaAN%2f75Cg4H08KnQfg%2fQtUIZmdURlTeEuTvN1SWZ1y9FnlIahauRMlrgxiNSUL7DBqPYN4LxAxplSDS%2byTAF6aNNAmLvO7E4ERIFudmH1O3LngQxPfBilCIGkXSDKOqocxlQL2GPYzBthuEw%2bC7GOom74DMIi4AtxwBYDC17%2bJSHNrPFXDRChHZGyQaG0JVt9S2%2fx1LiNG%2bjxHnEH2DEaWDSYlsa3qJygq4EZtlaeYRlE3YFM6uVo8rPy8KxOmoaYaR1JPmtTr3oyLQFeiryZOJykAvz3ypLADTckC2O%2bVfSpeDkp%2b3k9553VbiRdaX3%2bepmQ%3d%3d
- https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=soc%40dkbinnovative.net&senderemailaddress=ccooper%40siskiyoucu.org&senderorganization=AwGEAAAAAoAAAAADAQAAAJWynkaoNeRCq8ue2vXBepBPVT1zaXNraXlvdWN1MzY1Lm9ubWljcm9zb2Z0LmNvbSxPVT1NaWNyb3NvZnQgRXhjaGFuZ2UgSG9zdGVkIE9yZ2FuaXphdGlvbnMsREM9TkFNUFIxN0EwMDcsREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTQ1aPTi47bdMlQMa3ANfYMRDTj1Db25maWd1cmF0aW9uLENOPXNpc2tpeW91Y3UzNjUub25taWNyb3NvZnQuY29tLENOPUNvbmZpZ3VyYXRpb25Vbml0cyxEQz1OQU1QUjE3QTAwNyxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NAQ%3d%3d&messageid=%3cPH7PR16MB5949F23421230AC77A7BAD2AA9682%40PH7PR16MB5949.namprd16.prod.outlook.com%3e&cfmRecipient=SystemMailbox%7b0AF09B7F-434F-4B2F-9CBC-57639EDCFD9C%7d%40siskiyoucu365.onmicrosoft.com&consumerEncryption=false&senderorgid=b9bd677d-660d-4e30-a5ee-994f005fea65&urldecoded=1&e4e_sdata=n6OmHhZw2uJIfoZVjxaAN%2f75Cg4H08KnQfg%2fQtUIZmdURlTeEuTvN1SWZ1y9FnlIahauRMlrgxiNSUL7DBqPYN4LxAxplSDS%2byTAF6aNNAmLvO7E4ERIFudmH1O3LngQxPfBilCIGkXSDKOqocxlQL2GPYzBthuEw%2bC7GOom74DMIi4AtxwBYDC17%2bJSHNrPFXDRChHZGyQaG0JVt9S2%2fx1LiNG%2bjxHnEH2DEaWDSYlsa3qJygq4EZtlaeYRlE3YFM6uVo8rPy8KxOmoaYaR1JPmtTr3oyLQFeiryZOJykAvz3ypLADTckC2O%2bVfSpeDkp%2b3k9553VbiRdaX3%2bepmQ%3d%3d
message_v2.rpmsg