Static task
static1
Behavioral task
behavioral1
Sample
OneTimeConfirmation_Retain notification response needed today -Password -expiration -review __ Case #_326317.msg
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
OneTimeConfirmation_Retain notification response needed today -Password -expiration -review __ Case #_326317.msg
Resource
win10v2004-20231215-en
General
-
Target
OneTimeConfirmation_Retain notification response needed today -Password -expiration -review __ Case #_326317.msg
-
Size
139KB
-
MD5
d31547144e718da96d32d0cd7e5c4a06
-
SHA1
a75189d9ec2d5945eebc8e1ad56d987ae1cbe41c
-
SHA256
fb4abb9f2d7c2526d0c6869c928a870dac6730d681ce1f2e6f00a5325deb1f18
-
SHA512
b4073021b558dffbcb131618fef8c27028c5cf197ad26984c13a3cec2dd4f6945e7fa54c3f6adee262573c46a08429c14446f83917ba8d3387d0367d8daaad7b
-
SSDEEP
768:EJs4uikJMgccYtWcKBWsK3fICR+DNh11fopaqnFkcEdzgWsK5Pfxv8XuGquGDzN5:1i3nWpWfxLwcW4uGquGcSSTNqh7QcC
Malware Config
Signatures
Files
-
OneTimeConfirmation_Retain notification response needed today -Password -expiration -review __ Case #_326317.msg.msg
-
https://www.lawdepot.co.uk/emailconv.php?eid=71796098&redirect=//congonews%E3%80%82cd/wp-admin/includes/recess/b3JkZXJzQG5rdHBob3Rvbmljcy5jb20=#&%3CFONT%20id=%7BP786548493%7D%3E%E2%80%8F%3CSTRONG%3EP2037897539%3C/STRONG%3E%E2%80%8E%3C/FONT%3E%3CFONT%20id=%7BP360599124%7D%3E%E2%80%8F%3CSTRONG%3EP578754982%3C/STRONG%3E%E2%80%8E%3C/FONT%3E%3CFONT%20id=%7BP988650563%7D%3E%E2%80%8F%3CSTRONG%3EP693295953%3C/STRONG%3E%E2%80%8E%3C/FONT%3E%3CFONT%20id=%7BP1917096089%7D%3E%E2%80%8F%3CSTRONG%3EP1857715460%3C/STRONG%3E%E2%80%8E%3C/FONT%3E%3CFONT%20id=%7BP1648559384%7D%3E%E2%80%8F%3CSTRONG%3EP1857830783%3C/STRONG%3E%E2%80%8E%3C/FONT%3E%3CFONT%20id=%7BP912997760%7D%3E%E2%80%8F%3CSTRONG%3EP1272083842%3C/STRONG%3E%E2%80%8E%3C/FONT%3E%3CFONT%20id=%7BP1137432462%7D%3E%E2%80%8F%3CSTRONG%3EP647836621%3C/STRONG%3E%E2%80%8E%3C/FONT%3E%3CFONT%20id=%7BP1580743429%7D%3E%E2%80%8F%3CSTRONG%3EP1639743776%3C/STRONG%3E%E2%80%8E%3C/FONT%3E%3CFONT%20id=%7BP743147941%7D%3E%E2%80%8F%3CSTRONG%3EP1235158587%3C/STRONG%3E%E2%80%8E%3C/FONT%3E%3CFONT%20id=%7BP20057900%7D%3E%E2%80%8F%3CSTRONG%3EP858865118%3C/STRONG%3E%E2%80%8E%3C/FONT%3E%3CFONT%20id=%7BP1255485786%7D%3E%E2%80%8F%3CSTRONG%3EP1249453257%3C/STRONG%3E%E2%80%8E%3C/FONT%3E%3CFONT%20id=%7BP1638260721%7D%3E%E2%80%8F%3CSTRONG%3EP55208380%3C/STRONG%3E%E2%80%8E%3C/FONT%3E%3CFONT%20id=%7BP618759345%7D%3E%E2%80%8F%3CSTRONG%3EP845094263%3C/STRONG%3E%E2%80%8E%3C/FONT%3E%3CFONT%20id=%7BP852325208%7D%3E%E2%80%8F%3CSTRONG%3EP1279320762%3C/STRONG%3E%E2%80%8E%3C/FONT%3E%3CFONT%20id=%7BP1610930598%7D%3E%E2%80%8F%3CSTRONG%3EP1770954309%3C/STRONG%3E%E2%80%8E%3C/FONT%3E%3CFONT%20id=%7BP999632734%7D%3E%E2%80%8F%3CSTRONG%3EP88778456%3C/STRONG%3E%E2%80%8E%3C/FONT%3E%3CFONT%20id=%7BP390407741%7D%3E%E2%80%8F%3CSTRONG%3EP972911923%3C/STRONG%3E%E2%80%8E%3C/FONT%3E%3CFONT%20id=%7BP469899780%7D%3E%E2%80%8F%3CSTRONG%3EP362337302%3C/STRONG%3E%E2%80%8E%3C/FONT%3E%3CFONT%20id=%7BP303038579%7D%3E%E2%80%8F%3CSTRONG%3EP975671361%3C/STRONG%3E%E2%80%8E%3C/FONT%3E%3CFONT%20id=%7BP456644938%7D%3E%E2%80%8F%3CSTRONG%3EP1920313460%3C/STRONG%3E%E2%80%8E%3C/FONT%3E%3CFONT%20id=%7BP1389403720%7D%3E%E2%80%8F%3CSTRONG%3EP1845296495%3C/STRONG%3E%E2%80%8E%3C/FONT%3E%3CFONT%20id=%7BP69120816%7D%3E%E2%80%8F%3CSTRONG%3EP109216242%3C/STRONG%3E%E2%80%8E%3C/FONT%3E%3CFONT%20id=%7BP321246655%7D%3E%E2%80%8F%3CSTRONG%3EP200272573%3C/STRONG%3E%E2%80%8E%3C/FONT%3E%3CFONT%20id=%7BP917081526%7D%3E%E2%80%8F%3CSTRONG%3EP538304144%3C/STRONG%3E%E2%80%8E%3C/FONT%3E%3CFONT%20id=%7BP1673010388%7D%3E%E2%80%8F%3CSTRONG%3EP1948427819%3C/STRONG%3E%E2%80%8E%3C/FONT%3E
-
https://www.lawdepot.co.uk/emailconv.php?eid=71796098&redirect=//congonews}
-
http://nktphotonics.com
-