Overview
overview
1Static
static
1New Tab.eml
macos-10.15-amd64
1attachment-12
macos-10.15-amd64
1attachment-13
macos-10.15-amd64
1attachment-14
macos-10.15-amd64
1attachment-17
macos-10.15-amd64
1attachment-18
macos-10.15-amd64
1attachment-19
macos-10.15-amd64
1attachment-2
macos-10.15-amd64
1attachment-22
macos-10.15-amd64
1attachment-23
macos-10.15-amd64
1attachment-24
macos-10.15-amd64
1attachment-27
macos-10.15-amd64
1attachment-28
macos-10.15-amd64
1attachment-29
macos-10.15-amd64
1attachment-3
macos-10.15-amd64
1attachment-30
macos-10.15-amd64
1attachment-4
macos-10.15-amd64
1attachment-5
macos-10.15-amd64
1attachment-6
macos-10.15-amd64
1email-html-1.html
macos-10.15-amd64
1email-html-15.html
macos-10.15-amd64
1email-html-16.html
macos-10.15-amd64
1email-html-21.html
macos-10.15-amd64
1email-html-26.html
macos-10.15-amd64
1Static task
static1
Behavioral task
behavioral1
Sample
New Tab.eml
Resource
macos-20231201-en
Behavioral task
behavioral2
Sample
attachment-12
Resource
macos-20231201-en
Behavioral task
behavioral3
Sample
attachment-13
Resource
macos-20231201-en
Behavioral task
behavioral4
Sample
attachment-14
Resource
macos-20231201-en
Behavioral task
behavioral5
Sample
attachment-17
Resource
macos-20231201-en
Behavioral task
behavioral6
Sample
attachment-18
Resource
macos-20231201-en
Behavioral task
behavioral7
Sample
attachment-19
Resource
macos-20231201-en
Behavioral task
behavioral8
Sample
attachment-2
Resource
macos-20231201-en
Behavioral task
behavioral9
Sample
attachment-22
Resource
macos-20231201-en
Behavioral task
behavioral10
Sample
attachment-23
Resource
macos-20231201-en
Behavioral task
behavioral11
Sample
attachment-24
Resource
macos-20231201-en
Behavioral task
behavioral12
Sample
attachment-27
Resource
macos-20231201-en
Behavioral task
behavioral13
Sample
attachment-28
Resource
macos-20231201-en
Behavioral task
behavioral14
Sample
attachment-29
Resource
macos-20231201-en
Behavioral task
behavioral15
Sample
attachment-3
Resource
macos-20231201-en
Behavioral task
behavioral16
Sample
attachment-30
Resource
macos-20231201-en
Behavioral task
behavioral17
Sample
attachment-4
Resource
macos-20231201-en
Behavioral task
behavioral18
Sample
attachment-5
Resource
macos-20231201-en
Behavioral task
behavioral19
Sample
attachment-6
Resource
macos-20231201-en
Behavioral task
behavioral20
Sample
email-html-1.html
Resource
macos-20231201-en
Behavioral task
behavioral21
Sample
email-html-15.html
Resource
macos-20231201-en
Behavioral task
behavioral22
Sample
email-html-16.html
Resource
macos-20231201-en
Behavioral task
behavioral23
Sample
email-html-21.html
Resource
macos-20231201-en
Behavioral task
behavioral24
Sample
email-html-26.html
Resource
macos-20231201-en
General
-
Target
New Tab.mhtml
-
Size
560KB
-
MD5
4af188cf650ad1fe65f62a45c7a1e2ac
-
SHA1
6f93bcc45ca8add6a23c132ba51881f6b6daec99
-
SHA256
becf0e5958c8d0e217039dc3c0e2d4b2e7e7c13dc4b35352f08ed2ffe0189bee
-
SHA512
096b7ab8711fbcd67528ff3f65d54158181754f429746f3091673d363c3bc54a84e83e8dc1e4d934d53f34e2463c88e866b25a857e628d587c883e1f66013983
-
SSDEEP
12288:v9U2FJu9uPXc05czKMiuUrSIb9qgmBElhunZsG9CuwlTux26K:CwuMunZ7CuI1
Malware Config
Signatures
Files
-
New Tab.mhtml.eml
-
https://lisf.onelogin.com/login2/?return=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ1cmkiOiJodHRwczovL2xpc2Yub25lbG9naW4uY29tLyIsImlzcyI6Ik1PTk9SQUlMIiwiYnJhbmRfaWQiOiJtYXN0ZXIiLCJhdWQiOiJBQ0NFU1MiLCJleHAiOjE2ODQxNDM4NjUsInBhcmFtcyI6e30sImZmX211bHRpcGxlX2JyYW5kcyI6ZmFsc2UsIm1ldGhvZCI6ImdldCJ9.rbkZHJGX2LWLh23hElOsSfANnG3d8dW6lPkVYOhWuUE#app=
-
https://mail.google.com/mail/u/0/#inbox
-
https://www.kidsa-z.com/main/Login
-
https://www.google.com/search?q=al+reyada+engineering&source=lmns&bih=617&biw=1366&rlz=1CASFKO_enAE1055&hl=en&sa=X&ved=2ahUKEwjj-s6nhff-AhUppicCHTCMCn4Q_AUoAHoECAEQAA&safe=active&ssui=on
-
https://play.ttrockstars.com/
-
https://mail.google.com/mail/?tab=rm&ogbl
-
https://www.google.com/imghp?hl=en&tab=ri&ogbl
-
https://www.google.ae/intl/en/about/products?tab=rh
-
https://accounts.google.com/SignOutOptions?hl=en&continue=https://www.google.com%3Fhl%3Den-US&ec=GBRA8wE
-
https://www.google.com/support/accounts/bin/answer.py?answer=181692
-
https://myaccount.google.com/?hl=en&authuser=0&utm_source=OGB&utm_medium=act
-
https://accounts.google.com/AddSession?hl=en&continue=https://www.google.com%3Fhl%3Den-US&ec=GAlA8wE
-
https://accounts.google.com/Logout?hl=en&continue=https://www.google.com%3Fhl%3Den-US&timeStmp=1707900656&secTok=.AG5fkS_KG4dv9jLUdc2IBnpps_zcu94bgA&ec=GAdA8wE
-
https://policies.google.com/privacy?hl=en&authuser=0
-
https://policies.google.com/terms?hl=en&authuser=0
-
https://myaccount.google.com/?utm_source=OGB&utm_medium=app&authuser=0
-
https://mail.google.com/mail/?authuser=0
-
https://drive.google.com/?authuser=0
-
https://classroom.google.com/?authuser=0
-
https://docs.google.com/document/?usp=docs_ald&authuser=0
-
https://docs.google.com/spreadsheets/?usp=sheets_ald&authuser=0
-
https://docs.google.com/presentation/?usp=slides_ald&authuser=0
-
https://calendar.google.com/calendar?authuser=0
-
https://docs.google.com/forms/?authuser=0
-
https://sites.google.com/?authuser=0
-
https://contacts.google.com/?authuser=0
-
https://groups.google.com/?authuser=0
-
https://maps.google.com/?authuser=0
-
https://news.google.com/?authuser=0
-
https://ads.google.com/home/?subid=ww-ww-xs-ip-awhc-a-ogb_dash!o2&authuser=0
-
https://translate.google.com/?authuser=0
-
https://keep.google.com/?authuser=0
-
https://jamboard.google.com/?authuser=0
-
https://cloudsearch.google.com/cloudsearch?authuser=0
-
https://www.google.com/save?authuser=0
-
https://www.google.com/travel/?dest_src=al&authuser=0
-
https://passwords.google.com/?utm_source=OGB&utm_medium=AL&authuser=0
-
https://workspace.google.com/marketplace?pann=ogb&authuser=0
- Show all
-
-
attachment-12
-
attachment-13
-
attachment-14
-
attachment-17
-
attachment-18
-
attachment-19
-
attachment-2
-
attachment-22
-
attachment-23
-
attachment-24
-
attachment-27
-
attachment-28
-
attachment-29
-
attachment-3
-
attachment-30
-
attachment-4
-
attachment-5
-
attachment-6
-
email-html-1.txt.html
-
email-html-15.txt.html
-
email-html-16.txt.html
-
email-html-21.txt.html
-
email-html-26.txt.html