Overview
overview
5Static
static
1triage-rep...om.zip
windows7-x64
1triage-rep...om.zip
windows10-2004-x64
1triage-rep...-1.zip
windows7-x64
1triage-rep...-1.zip
windows10-2004-x64
1icon.png
windows7-x64
3icon.png
windows10-2004-x64
3logo.png
windows7-x64
3logo.png
windows10-2004-x64
3manifest.json
windows7-x64
3manifest.json
windows10-2004-x64
3pass.json
windows7-x64
3pass.json
windows10-2004-x64
3signature
windows7-x64
1signature
windows10-2004-x64
1thumbnail.png
windows7-x64
3thumbnail.png
windows10-2004-x64
3triage-rep...y.html
windows7-x64
1triage-rep...y.html
windows10-2004-x64
1triage-rep...dy.txt
windows7-x64
1triage-rep...dy.txt
windows10-2004-x64
1triage-rep...rs.eml
windows7-x64
5triage-rep...rs.eml
windows10-2004-x64
3triage-rep...al.eml
windows7-x64
5triage-rep...al.eml
windows10-2004-x64
3HiHello.eml
windows7-x64
5HiHello.eml
windows10-2004-x64
3email-plain-1.txt
windows7-x64
1email-plain-1.txt
windows10-2004-x64
1triage-rep...aw.eml
windows7-x64
5triage-rep...aw.eml
windows10-2004-x64
3triage-rep...ls.txt
windows7-x64
1triage-rep...ls.txt
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
triage-report_17514-jensab_AT_rogers_com.zip
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
triage-report_17514-jensab_AT_rogers_com.zip
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
triage-report_17514-jensab_AT_rogers_com/attachments/Attachment-1.zip
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
triage-report_17514-jensab_AT_rogers_com/attachments/Attachment-1.zip
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
icon.png
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
icon.png
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
logo.png
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
logo.png
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
manifest.json
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
manifest.json
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
pass.json
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
pass.json
Resource
win10v2004-20231222-en
Behavioral task
behavioral13
Sample
signature
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
signature
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
thumbnail.png
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
thumbnail.png
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
triage-report_17514-jensab_AT_rogers_com/body.html
Resource
win7-20231129-en
Behavioral task
behavioral18
Sample
triage-report_17514-jensab_AT_rogers_com/body.html
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
triage-report_17514-jensab_AT_rogers_com/body.txt
Resource
win7-20231215-en
Behavioral task
behavioral20
Sample
triage-report_17514-jensab_AT_rogers_com/body.txt
Resource
win10v2004-20231222-en
Behavioral task
behavioral21
Sample
triage-report_17514-jensab_AT_rogers_com/headers.eml
Resource
win7-20231215-en
Behavioral task
behavioral22
Sample
triage-report_17514-jensab_AT_rogers_com/headers.eml
Resource
win10v2004-20231222-en
Behavioral task
behavioral23
Sample
triage-report_17514-jensab_AT_rogers_com/original.eml
Resource
win7-20231215-en
Behavioral task
behavioral24
Sample
triage-report_17514-jensab_AT_rogers_com/original.eml
Resource
win10v2004-20231215-en
Behavioral task
behavioral25
Sample
HiHello.eml
Resource
win7-20231215-en
Behavioral task
behavioral26
Sample
HiHello.eml
Resource
win10v2004-20231215-en
Behavioral task
behavioral27
Sample
email-plain-1.txt
Resource
win7-20231215-en
Behavioral task
behavioral28
Sample
email-plain-1.txt
Resource
win10v2004-20231222-en
Behavioral task
behavioral29
Sample
triage-report_17514-jensab_AT_rogers_com/raw.eml
Resource
win7-20231129-en
Behavioral task
behavioral30
Sample
triage-report_17514-jensab_AT_rogers_com/raw.eml
Resource
win10v2004-20231222-en
Behavioral task
behavioral31
Sample
triage-report_17514-jensab_AT_rogers_com/urls.txt
Resource
win7-20231215-en
Behavioral task
behavioral32
Sample
triage-report_17514-jensab_AT_rogers_com/urls.txt
Resource
win10v2004-20231215-en
General
-
Target
triage-report_17514-jensab_AT_rogers_com.zip
-
Size
615KB
-
MD5
cc5ef8b1b23a382b41b08b52b61d397c
-
SHA1
dfe2a84781a14f23064d51bc39d06e5363e54aa1
-
SHA256
681d23cfcdb4af822f5386e3029314f7f0a928819927bcdfd4f304c8a8e8c88e
-
SHA512
131c66bcba8b425b96bb45b6c2053b98711d9f2b5218f156fc9e7d874d0a720d7ac61743f70cb1069c9a9e1eef90f9332b20b43ceacb7eb9c8cac69ab9c3804e
-
SSDEEP
12288:S0kWSsdXGneJDsRo18x2rnEMM4aZ1l4XUZyBLD9VOdr1VwzlJ5+cS8k:WWSsceJKKaEEhV4XU0Bn9VOdxulH+lh
Malware Config
Signatures
Files
-
triage-report_17514-jensab_AT_rogers_com.zip.zip
Password: infected
-
triage-report_17514-jensab_AT_rogers_com/attachments/Attachment-1.pkpass.zip
Password: infected
-
icon.png.png
Password: infected
-
logo.png.png
Password: infected
-
manifest.json
-
pass.json
-
signature
-
thumbnail.png.png
Password: infected
-
triage-report_17514-jensab_AT_rogers_com/body.html.html
-
triage-report_17514-jensab_AT_rogers_com/body.txt
-
triage-report_17514-jensab_AT_rogers_com/headers.txt.eml
-
triage-report_17514-jensab_AT_rogers_com/original.eml.eml
Password: infected
-
-
https://employees.senecapolytechnic.ca/spaces/62/it-security/wiki/view/18205/phishing
-
https://employees.senecapolytechnic.ca/spaces/62/it-security/blogs/general/18215/qr-code-phishing-the-rising-threat-and-how-to-stay-safe
-
https://employees.senecapolytechnic.ca/spaces/63/privacy-office/wiki/view/1935/privacy-awareness
-
https://employees.senecapolytechnic.ca/spaces/62/it-security/blogs/general/17351/report-phishing-emails
-
-
HiHello.eml.eml
-
email-plain-1.txt
-
triage-report_17514-jensab_AT_rogers_com/raw.eml.eml
-
triage-report_17514-jensab_AT_rogers_com/urls.txt