Overview
overview
5Static
static
1INVPVM41511.pdf
windows7-x64
1INVPVM41511.pdf
windows10-2004-x64
1INVPVM41512.pdf
windows7-x64
1INVPVM41512.pdf
windows10-2004-x64
1INVPVM41513.pdf
windows7-x64
1INVPVM41513.pdf
windows10-2004-x64
1INVPVM41514.pdf
windows7-x64
1INVPVM41514.pdf
windows10-2004-x64
1INVPVM41515.pdf
windows7-x64
1INVPVM41515.pdf
windows10-2004-x64
1RE_ Excels...er.eml
windows7-x64
5RE_ Excels...er.eml
windows10-2004-x64
3Invoice_IN...59.pdf
windows7-x64
1Invoice_IN...59.pdf
windows10-2004-x64
1Invoice_IN...11.pdf
windows7-x64
1Invoice_IN...11.pdf
windows10-2004-x64
1Invoice_IN...92.pdf
windows7-x64
1Invoice_IN...92.pdf
windows10-2004-x64
1Invoice_IN...83.pdf
windows7-x64
1Invoice_IN...83.pdf
windows10-2004-x64
1Invoice_IN...62.pdf
windows7-x64
1Invoice_IN...62.pdf
windows10-2004-x64
1email-html-2.html
windows7-x64
1email-html-2.html
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
INVPVM41511.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
INVPVM41511.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
INVPVM41512.pdf
Resource
win7-20240215-en
Behavioral task
behavioral4
Sample
INVPVM41512.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
INVPVM41513.pdf
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
INVPVM41513.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
INVPVM41514.pdf
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
INVPVM41514.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
INVPVM41515.pdf
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
INVPVM41515.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
RE_ Excelsior RENDR Laboratory EXRNY66001 ___ACTION REQUESTED___ Intent To Engage Third Party Legal Partner.eml
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
RE_ Excelsior RENDR Laboratory EXRNY66001 ___ACTION REQUESTED___ Intent To Engage Third Party Legal Partner.eml
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
Invoice_INVPVM48922_1706555199059.pdf
Resource
win7-20240215-en
Behavioral task
behavioral14
Sample
Invoice_INVPVM48922_1706555199059.pdf
Resource
win10v2004-20240220-en
Behavioral task
behavioral15
Sample
Invoice_INVPVM48923_1706555380611.pdf
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
Invoice_INVPVM48923_1706555380611.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
Invoice_INVPVM48924_1706555463492.pdf
Resource
win7-20231215-en
Behavioral task
behavioral18
Sample
Invoice_INVPVM48924_1706555463492.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
Invoice_INVPVM48925_1706555544083.pdf
Resource
win7-20231215-en
Behavioral task
behavioral20
Sample
Invoice_INVPVM48925_1706555544083.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral21
Sample
Invoice_INVPVM48926_1706555626862.pdf
Resource
win7-20231215-en
Behavioral task
behavioral22
Sample
Invoice_INVPVM48926_1706555626862.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral23
Sample
email-html-2.html
Resource
win7-20231129-en
Behavioral task
behavioral24
Sample
email-html-2.html
Resource
win10v2004-20240220-en
General
-
Target
Re_ Provotaion collection .eml
-
Size
508KB
-
MD5
c256b4ccf7b8ae5836955adc8a3f1aac
-
SHA1
971427ab40a178b81b2244bb7c6faa811450456b
-
SHA256
f507cdb570121bdc1ab9a6a49e0efd69f60be81f173889a6cb227bb534ae32ae
-
SHA512
9c9c6ed0046930a3452798c77d42408816806cb0d981677d2e98f37156bec4f51b3030c3da272b765d76cbc9a24c92633fa54f47d79555139c03c1b4190749ed
-
SSDEEP
6144:4ull9JmnXpjzsghQapJ1LyNS1DqWehjB12QxRYtafHO9LlJNLMHX9iQteYrKSwlT:UjXQa9LyI1ho4QqD9H5MNveldPtMGic
Malware Config
Signatures
Files
-
Re_ Provotaion collection .eml.eml
-
-
http://www.rendrcare.com/
-
https://aka.ms/o0ukef
-
-
INVPVM41511.pdf.pdf
-
INVPVM41512.pdf.pdf
-
INVPVM41513.pdf.pdf
-
INVPVM41514.pdf.pdf
-
INVPVM41515.pdf.pdf
-
RE_ Excelsior RENDR Laboratory EXRNY66001 ___ACTION REQUESTED___ Intent To Engage Third Party Legal Partner.eml.eml
-
-
http://www.rendrcare.com/
-
http://www.provationmedical.com/
-
-
Invoice_INVPVM48922_1706555199059.pdf.pdf
-
Invoice_INVPVM48923_1706555380611.pdf.pdf
-
Invoice_INVPVM48924_1706555463492.pdf.pdf
-
Invoice_INVPVM48925_1706555544083.pdf.pdf
-
Invoice_INVPVM48926_1706555626862.pdf.pdf
-
email-html-2.txt.html
-
email-plain-1.txt
-
image001.png.png
-
email-html-2.txt.html
-
email-plain-1.txt
-
image001.png.png