Static task
static1
Behavioral task
behavioral1
Sample
df33aff1-982c-4011-9aa6-08dc19049bf4/13a13faf-e276-3bf1-3f6e-43ac18cb6d62.eml
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
df33aff1-982c-4011-9aa6-08dc19049bf4/13a13faf-e276-3bf1-3f6e-43ac18cb6d62.eml
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
email-html-2.html
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
email-html-2.html
Resource
win10v2004-20231222-en
Behavioral task
behavioral5
Sample
email-plain-1.txt
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
email-plain-1.txt
Resource
win10v2004-20231222-en
Behavioral task
behavioral7
Sample
image001.png
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
image001.png
Resource
win10v2004-20231215-en
General
-
Target
Quarantined Messages.zip
-
Size
20KB
-
MD5
86835a97079850486ecd5317e4162d47
-
SHA1
ddff066e025d64c09408ac990a6d398b1094b63d
-
SHA256
f69d5f74d87d9ea1c017194011c3c20a843980acbfdfe80a9635411748f781b8
-
SHA512
52a2c43059575aeb68b077cb49a7dc6a7a569ade12b76b63e6eae9a0a52cc87052e6ae59bd220d9b3f7a76da020f26307b5b583d337ab77f389ab467a29a626e
-
SSDEEP
384:+6xDs/GdutB5CAMDhrVJ36TyN9V1sXvVnIKkMq+PRY5tJit2is:ldujcAMDJOAV1QZImq+PRYDot27
Malware Config
Signatures
Files
-
Quarantined Messages.zip.zip
Password: infected
-
df33aff1-982c-4011-9aa6-08dc19049bf4/13a13faf-e276-3bf1-3f6e-43ac18cb6d62.eml.eml
-
-
http://www.facebook.com/BulkBookStore
-
https://bulkbookstore.com/esop/
-
https://bulkbookstore.com/?utm_source=personalcontact&utm_medium=email&utm_campaign=bbslogo&utm_content=personalemail
-
http://bulkbookstore.com/
-
-
email-html-2.txt.html
-
email-plain-1.txt
-
image001.png.png