Overview

overview

5

Static

static

3

triage-rep...om.zip

windows7-x64

1

triage-rep...om.zip

windows10-2004-x64

1

triage-rep...on.pdf

windows7-x64

1

triage-rep...on.pdf

windows10-2004-x64

1

triage-rep...y.html

windows7-x64

1

triage-rep...y.html

windows10-2004-x64

1

triage-rep...dy.txt

windows7-x64

1

triage-rep...dy.txt

windows10-2004-x64

1

triage-rep...rs.eml

windows7-x64

5

triage-rep...rs.eml

windows10-2004-x64

3

triage-rep...al.eml

windows7-x64

5

triage-rep...al.eml

windows10-2004-x64

3

You have j...3..eml

windows7-x64

5

You have j...3..eml

windows10-2004-x64

3

Here_is_th...on.pdf

windows7-x64

1

Here_is_th...on.pdf

windows10-2004-x64

1

email-html-2.html

windows7-x64

1

email-html-2.html

windows10-2004-x64

1

email-plain-1.txt

windows7-x64

1

email-plain-1.txt

windows10-2004-x64

1

email-plain-1.txt

windows7-x64

1

email-plain-1.txt

windows10-2004-x64

1

triage-rep...aw.eml

windows7-x64

5

triage-rep...aw.eml

windows10-2004-x64

3

Here_is_th...on.pdf

windows7-x64

1

Here_is_th...on.pdf

windows10-2004-x64

1

email-html-2.html

windows7-x64

1

email-html-2.html

windows10-2004-x64

1

email-plain-1.txt

windows7-x64

1

email-plain-1.txt

windows10-2004-x64

1

triage-rep...ls.txt

windows7-x64

1

triage-rep...ls.txt

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    triage-report_17975-alex_godfrey_AT_thegetgoinc_com.zip

  • Size

    309KB

  • MD5

    0d0089991c0fe202d77518c0023b3fe7

  • SHA1

    b574138284405dffdfeea94d2dbeb604aeb0602e

  • SHA256

    a25cee87439bc587a51f254ec1302b813e604cf9dddc28608ffdd2c05920a4a8

  • SHA512

    2546e5153115fe8a850a320884717093964570263b82a2a4bbd7da36372907de8aee46168550607ea5e74577ae5b95da33c8c04c93bcdb8991ec950e4ce3cb61

  • SSDEEP

    6144:0IwLyIgYRZLDKCMAz09afybSzG5JvBWcu0hamHtgopina3ir0YcFcylHolesI+IT:W0YRZfKC7Nfyb15JvxbhvNnihrXcKylZ

Score
3/10
pdflink

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink

Files

  • triage-report_17975-alex_godfrey_AT_thegetgoinc_com.zip
    .zip

    Password: infected

  • triage-report_17975-alex_godfrey_AT_thegetgoinc_com/attachments/Here_is_the_Voicemail_you_received_from_Alex_Godfrey_GGI_on.pdf
    .pdf

    • https://qetqonic.com/

    • http://www.thegetgoinc.com/

  • triage-report_17975-alex_godfrey_AT_thegetgoinc_com/body.html
    .html
  • triage-report_17975-alex_godfrey_AT_thegetgoinc_com/body.txt
  • triage-report_17975-alex_godfrey_AT_thegetgoinc_com/headers.txt
    .eml
  • triage-report_17975-alex_godfrey_AT_thegetgoinc_com/original.eml
    .eml

    • https://employees.senecapolytechnic.ca/spaces/62/it-security/wiki/view/18205/phishing

    • https://employees.senecapolytechnic.ca/spaces/62/it-security/blogs/general/18215/qr-code-phishing-the-rising-threat-and-how-to-stay-safe

    • https://students.senecapolytechnic.ca/spaces/188/privacy-office/articles/news/13428/sharing-sensitive-information

    • https://employees.senecapolytechnic.ca/spaces/62/it-security/blogs/general/17351/report-phishing-emails

    • http://www.thegetgoinc.com

  • You have just received a new Voice Message from a Wireless Caller Alex Godfrey (416) 458-7773..eml
    .eml

    • https://employees.senecapolytechnic.ca/spaces/62/it-security/wiki/view/18205/phishing

    • https://employees.senecapolytechnic.ca/spaces/62/it-security/blogs/general/18215/qr-code-phishing-the-rising-threat-and-how-to-stay-safe

    • https://students.senecapolytechnic.ca/spaces/188/privacy-office/articles/news/13428/sharing-sensitive-information

    • https://employees.senecapolytechnic.ca/spaces/62/it-security/blogs/general/17351/report-phishing-emails

    • http://www.thegetgoinc.com

  • Here_is_the_Voicemail_you_received_from_Alex_Godfrey_GGI_on.pdf
    .pdf

    • https://qetqonic.com/

    • http://www.thegetgoinc.com/

  • email-html-2.txt
    .html
  • email-plain-1.txt
  • email-plain-1.txt
  • triage-report_17975-alex_godfrey_AT_thegetgoinc_com/raw.eml
    .eml

    • https://employees.senecapolytechnic.ca/spaces/62/it-security/wiki/view/18205/phishing

    • https://employees.senecapolytechnic.ca/spaces/62/it-security/blogs/general/18215/qr-code-phishing-the-rising-threat-and-how-to-stay-safe

    • https://students.senecapolytechnic.ca/spaces/188/privacy-office/articles/news/13428/sharing-sensitive-information

    • https://employees.senecapolytechnic.ca/spaces/62/it-security/blogs/general/17351/report-phishing-emails

    • http://www.thegetgoinc.com

  • Here_is_the_Voicemail_you_received_from_Alex_Godfrey_GGI_on.pdf
    .pdf

    • https://qetqonic.com/

    • http://www.thegetgoinc.com/

  • email-html-2.txt
    .html
  • email-plain-1.txt
  • triage-report_17975-alex_godfrey_AT_thegetgoinc_com/urls.txt