triage-report_17971-launch_AT_launch_kyvio_com[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

triage-report_17971-launch_AT_launch_kyvio_com.zip
Size

45KB
MD5

29fb671843e0b2ce5cde66c586f88de6
SHA1

6bc1d663e4cf61b13e1b82a22f8aa99da3f06232
SHA256

32534a24872beb5e33020aff5d9e606961b8c1170e081428369e01ef43faccd9
SHA512

e299a36716fb173518432a4d40287c9b05f0fb85689a30d3857e7dbb262b3a7b3cf92831fa2dff04c9548febcdb977c6629c52876881497f53c67ae6e3cf3a15
SSDEEP

768:a27og2gTFBYUNywyEgIAlQGOilUfqPBDR94MReTzH2vcccx8OBBHTkD25KCduPc:5og2GFBYU4wyEzhcPKHTiCTEvmuPc

Score

1^/10

Malware Config

Signatures

Files

triage-report_17971-launch_AT_launch_kyvio_com.zip
.zip

Password: infected
triage-report_17971-launch_AT_launch_kyvio_com/body.html
.html
triage-report_17971-launch_AT_launch_kyvio_com/body.txt
triage-report_17971-launch_AT_launch_kyvio_com/headers.txt
.eml
triage-report_17971-launch_AT_launch_kyvio_com/original.eml
.eml
- https://t.launch.kyvio.com/api/unsubscribe?key=b450076dee2c4753713ae1ea1c5960d850f62a1b68db670fb5224d949c0db88f79bd022cd84d6d7ceb180145012ec08c_2013ca103477198675a3944277240f6f
- https://employees.senecapolytechnic.ca/spaces/62/it-security/wiki/view/18205/phishing
- https://employees.senecapolytechnic.ca/spaces/62/it-security/blogs/general/18215/qr-code-phishing-the-rising-threat-and-how-to-stay-safe
- https://students.senecapolytechnic.ca/spaces/188/privacy-office/articles/news/13428/sharing-sensitive-information
- https://employees.senecapolytechnic.ca/spaces/62/it-security/blogs/general/17351/report-phishing-emails
- https://t.launch.kyvio.com/c/720ff4aefc9efaf3b813b69ac33edf59_1254822c8fdb2ab98dfd68a5fd18a620?sid=bec75dc815478e093e7b8785e5e80323_756f3300968282b216444fdf8d87ea7e&aid=0kwA
- https://t.launch.kyvio.com/c/16d48ba0d22044885606cda0afd168e8_1634faecc3278f87ebcb90d0e8fc2b95?sid=bec75dc815478e093e7b8785e5e80323_756f3300968282b216444fdf8d87ea7e&aid=0kwA
- https://t.launch.kyvio.com/c/a859b1bf5d444c1a34f9c624bbe04ddc_da50c27a8127b3eeb561c052685de4d9?sid=bec75dc815478e093e7b8785e5e80323_756f3300968282b216444fdf8d87ea7e&aid=0kwA
- https://t.launch.kyvio.com/c/c3937f7c5c37eea841190a757c09a2d2_3d620b06b53641fade196d615c6de2e2?sid=bec75dc815478e093e7b8785e5e80323_756f3300968282b216444fdf8d87ea7e&aid=0kwA
- https://t.launch.kyvio.com/c/654d5f56fab73045935bca759166325a_12584a9b9dfbf4331702cf0f23832049?sid=bec75dc815478e093e7b8785e5e80323_756f3300968282b216444fdf8d87ea7e&aid=0kwA
- http://
- https://t.launch.kyvio.com/c/084e93583fafa57adfa274b4cd1d0f61_ae1151067eaf63a83d2aa44102d088a5?sid=bec75dc815478e093e7b8785e5e80323_756f3300968282b216444fdf8d87ea7e&aid=0kwA
- https://t.launch.kyvio.com/api/update?key=b450076dee2c4753713ae1ea1c5960d850f62a1b68db670fb5224d949c0db88f79bd022cd84d6d7ceb180145012ec08c_2013ca103477198675a3944277240f6f
- https://t.launch.kyvio.com/redirect?path=junk&key=b450076dee2c4753713ae1ea1c5960d850f62a1b68db670fb5224d949c0db88f79bd022cd84d6d7ceb180145012ec08c_2013ca103477198675a3944277240f6f
- https://t.launch.kyvio.com/open/image.png?key=b450076dee2c4753713ae1ea1c5960d850f62a1b68db670fb5224d949c0db88f79bd022cd84d6d7ceb180145012ec08c_2013ca103477198675a3944277240f6f
- https://cdn.launch.kyvio.com/siteContent/assets/templates/common/spacer.png
- https://cdn.launch.kyvio.com/userContent/24923/fileManager/25547/neilbeach.jpg
- https://govumu.com/
- https://www.govumu.com/bundle
- http://schema.org/Organization
- http://schema.org/EmailMessage
- http://schema.org/DiscountOffer
- http://schema.org/PromotionCard
- https://s3.amazonaws.com/freshmails.io/templates/annotations/earlybird01.png
- Show all
LAST CHANCE to get my new app at a one-off price.eml
.eml
- https://employees.senecapolytechnic.ca/spaces/62/it-security/wiki/view/18205/phishing
- https://employees.senecapolytechnic.ca/spaces/62/it-security/blogs/general/18215/qr-code-phishing-the-rising-threat-and-how-to-stay-safe
- https://students.senecapolytechnic.ca/spaces/188/privacy-office/articles/news/13428/sharing-sensitive-information
- https://employees.senecapolytechnic.ca/spaces/62/it-security/blogs/general/17351/report-phishing-emails
- https://t.launch.kyvio.com/open/image.png?key=b450076dee2c4753713ae1ea1c5960d850f62a1b68db670fb5224d949c0db88f79bd022cd84d6d7ceb180145012ec08c_2013ca103477198675a3944277240f6f]
- https://t.launch.kyvio.com/c/720ff4aefc9efaf3b813b69ac33edf59_1254822c8fdb2ab98dfd68a5fd18a620?sid=bec75dc815478e093e7b8785e5e80323_756f3300968282b216444fdf8d87ea7e&aid=0kwA
- https://t.launch.kyvio.com/c/16d48ba0d22044885606cda0afd168e8_1634faecc3278f87ebcb90d0e8fc2b95?sid=bec75dc815478e093e7b8785e5e80323_756f3300968282b216444fdf8d87ea7e&aid=0kwA
- https://t.launch.kyvio.com/c/a859b1bf5d444c1a34f9c624bbe04ddc_da50c27a8127b3eeb561c052685de4d9?sid=bec75dc815478e093e7b8785e5e80323_756f3300968282b216444fdf8d87ea7e&aid=0kwA
- https://t.launch.kyvio.com/c/c3937f7c5c37eea841190a757c09a2d2_3d620b06b53641fade196d615c6de2e2?sid=bec75dc815478e093e7b8785e5e80323_756f3300968282b216444fdf8d87ea7e&aid=0kwA
- https://t.launch.kyvio.com/c/654d5f56fab73045935bca759166325a_12584a9b9dfbf4331702cf0f23832049?sid=bec75dc815478e093e7b8785e5e80323_756f3300968282b216444fdf8d87ea7e&aid=0kwA
- https://cdn.launch.kyvio.com/siteContent/assets/templates/common/spacer.png]
- http://
- https://t.launch.kyvio.com/c/084e93583fafa57adfa274b4cd1d0f61_ae1151067eaf63a83d2aa44102d088a5?sid=bec75dc815478e093e7b8785e5e80323_756f3300968282b216444fdf8d87ea7e&aid=0kwA
- https://t.launch.kyvio.com/api/unsubscribe?key=b450076dee2c4753713ae1ea1c5960d850f62a1b68db670fb5224d949c0db88f79bd022cd84d6d7ceb180145012ec08c_2013ca103477198675a3944277240f6f
- https://t.launch.kyvio.com/api/update?key=b450076dee2c4753713ae1ea1c5960d850f62a1b68db670fb5224d949c0db88f79bd022cd84d6d7ceb180145012ec08c_2013ca103477198675a3944277240f6f
- https://t.launch.kyvio.com/redirect?path=junk&key=b450076dee2c4753713ae1ea1c5960d850f62a1b68db670fb5224d949c0db88f79bd022cd84d6d7ceb180145012ec08c_2013ca103477198675a3944277240f6f
- Show all
email-html-2.txt
.html
email-plain-1.txt
email-plain-1.txt
triage-report_17971-launch_AT_launch_kyvio_com/raw.eml
.eml
- https://employees.senecapolytechnic.ca/spaces/62/it-security/wiki/view/18205/phishing
- https://employees.senecapolytechnic.ca/spaces/62/it-security/blogs/general/18215/qr-code-phishing-the-rising-threat-and-how-to-stay-safe
- https://students.senecapolytechnic.ca/spaces/188/privacy-office/articles/news/13428/sharing-sensitive-information
- https://employees.senecapolytechnic.ca/spaces/62/it-security/blogs/general/17351/report-phishing-emails
- https://t.launch.kyvio.com/open/image.png?key=b450076dee2c4753713ae1ea1c5960d850f62a1b68db670fb5224d949c0db88f79bd022cd84d6d7ceb180145012ec08c_2013ca103477198675a3944277240f6f]
- https://t.launch.kyvio.com/c/720ff4aefc9efaf3b813b69ac33edf59_1254822c8fdb2ab98dfd68a5fd18a620?sid=bec75dc815478e093e7b8785e5e80323_756f3300968282b216444fdf8d87ea7e&aid=0kwA
- https://t.launch.kyvio.com/c/16d48ba0d22044885606cda0afd168e8_1634faecc3278f87ebcb90d0e8fc2b95?sid=bec75dc815478e093e7b8785e5e80323_756f3300968282b216444fdf8d87ea7e&aid=0kwA
- https://t.launch.kyvio.com/c/a859b1bf5d444c1a34f9c624bbe04ddc_da50c27a8127b3eeb561c052685de4d9?sid=bec75dc815478e093e7b8785e5e80323_756f3300968282b216444fdf8d87ea7e&aid=0kwA
- https://t.launch.kyvio.com/c/c3937f7c5c37eea841190a757c09a2d2_3d620b06b53641fade196d615c6de2e2?sid=bec75dc815478e093e7b8785e5e80323_756f3300968282b216444fdf8d87ea7e&aid=0kwA
- https://t.launch.kyvio.com/c/654d5f56fab73045935bca759166325a_12584a9b9dfbf4331702cf0f23832049?sid=bec75dc815478e093e7b8785e5e80323_756f3300968282b216444fdf8d87ea7e&aid=0kwA
- https://cdn.launch.kyvio.com/siteContent/assets/templates/common/spacer.png]
- http://
- https://t.launch.kyvio.com/c/084e93583fafa57adfa274b4cd1d0f61_ae1151067eaf63a83d2aa44102d088a5?sid=bec75dc815478e093e7b8785e5e80323_756f3300968282b216444fdf8d87ea7e&aid=0kwA
- https://t.launch.kyvio.com/api/unsubscribe?key=b450076dee2c4753713ae1ea1c5960d850f62a1b68db670fb5224d949c0db88f79bd022cd84d6d7ceb180145012ec08c_2013ca103477198675a3944277240f6f
- https://t.launch.kyvio.com/api/update?key=b450076dee2c4753713ae1ea1c5960d850f62a1b68db670fb5224d949c0db88f79bd022cd84d6d7ceb180145012ec08c_2013ca103477198675a3944277240f6f
- https://t.launch.kyvio.com/redirect?path=junk&key=b450076dee2c4753713ae1ea1c5960d850f62a1b68db670fb5224d949c0db88f79bd022cd84d6d7ceb180145012ec08c_2013ca103477198675a3944277240f6f
- Show all
email-html-2.txt
.html
email-plain-1.txt
triage-report_17971-launch_AT_launch_kyvio_com/urls.txt

Sharing

General

Malware Config

Signatures

Files

Password: infected