Behavioral task
behavioral1
Sample
See Attachment.msg
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
See Attachment.msg
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
See Attachment now-1.pdf
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
See Attachment now-1.pdf
Resource
win10v2004-20240226-en
General
-
Target
See Attachment.msg
-
Size
85KB
-
MD5
dce27de16231b801cc3858039a143d3b
-
SHA1
060080ed7472804e81d9f6d1027450a8dac9209a
-
SHA256
2f4e685a1383d45a23f992f907e43c6cd98f4dc62af3f085d874f9986cb64a59
-
SHA512
c4400ecdfd537a1f7ab2e68f0907af0f7593b3a1af9ad1433beaa2b04d34926d22dcf5b17cee9fec833c8012e9511ab4046577b3581106c00932b8187c87cffe
-
SSDEEP
1536:ri5zW/WNEGoQpWMEYXEZWYWQ2MUc7A6qBw5hgtpDH:ri5JKQXas6Uxn
Malware Config
Signatures
-
HTTP links in PDF interactive object 2 IoCs
Detects HTTP links in interactive objects within PDF files.
resource yara_rule sample pdf_with_link_action static1/unpack001/See Attachment now-1.pdf pdf_with_link_action
Files
-
See Attachment.msg.msg
-
https://aka.ms/LearnAboutSenderIdentification
-
http://schalifax.org
-
-
See Attachment now-1.pdf.pdf
-
https://t.co/0RhmzUqt5Y
-