Static task
static1
Behavioral task
behavioral1
Sample
(40% OFF) planos de saúde empresariais.msg
Resource
win7-20240221-en
General
-
Target
(40% OFF) planos de saúde empresariais.msg
-
Size
45KB
-
MD5
d07f6981ab47141dc2971428adbd6a8c
-
SHA1
d3245f2f84e38831da65222ced7cf98a8a66339c
-
SHA256
b3265765e33f61da59c5824817d14598b1ddc2c3f6259f9bc5ffd1a3e34558df
-
SHA512
01322968759276470ef8a64d71d2362835961b0a6394c455c21fcd05e69cf44b4bbd71889151a2d9ccc1ddb16b34876993e70c7428aba38d0a323cdc15b03f54
-
SSDEEP
768:zFBfLCB4aLER7AXpJ3TaYxhkz4qOHWBhGGkrPNVA0nsv:zFlOOaXZJ3TaYxhkTOHW2l1
Malware Config
Signatures
Files
-
(40% OFF) planos de saúde empresariais.msg.msg
-
http://f9c.com.br
-
http://ec2-54-175-75-248.compute-1.amazonaws.com/mw/latest/index.php/campaigns/nb556ql9ddb23/track-opening/dp682grpbdc61
-
https://bucketjul.s3.amazonaws.com/top-mail.jpg
-
https://imsva91-ctp.trendmicro.com:443/wis/clicktime/v1/query?url=http%3a%2f%2fec2%2d54%2d175%2d75%2d248.compute%2d1.amazonaws.com%2fmw%2flatest%2findex.php%2fcampaigns%2fnb556ql9ddb23%2ftrack%2durl%2fdp682grpbdc61%2f438e682885a2bdbcfa9ec42b8eaad071f4240c86&umid=B722AE36-0947-7206-8A91-E0FFEDDBF919&auth=04d8cbfb2262cbe07ceab943606e6e5d0148629e-bc353014279c2ff3a3271fb24db3125f56d8077f
-
https://imsva91-ctp.trendmicro.com:443/wis/clicktime/v1/query?url=http%3a%2f%2fec2%2d54%2d175%2d75%2d248.compute%2d1.amazonaws.com%2fmw%2flatest%2findex.php%2fcampaigns%2fnb556ql9ddb23%2ftrack%2durl%2fdp682grpbdc61%2f438e682885a2bdbcfa9ec42b8eaad071f4240c86&umid=B722AE36-0947-7206-8A91-E0FFEDDBF919&auth=04d8cbfb2262cbe07ceab943606e6e5d0148629e-bc353014279c2ff3a3271fb24db3125f56d8077f
-
https://imsva91-ctp.trendmicro.com:443/wis/clicktime/v1/query?url=http%3a%2f%2fec2%2d54%2d175%2d75%2d248.compute%2d1.amazonaws.com%2fmw%2flatest%2findex.php%2fcampaigns%2fnb556ql9ddb23%2ftrack%2durl%2fdp682grpbdc61%2f88399dc6e28da407524359edbf65ede88632c3de&umid=B722AE36-0947-7206-8A91-E0FFEDDBF919&auth=04d8cbfb2262cbe07ceab943606e6e5d0148629e-902553d314c17c0c3f3df15f36ff6e785fe70181
-
https://imsva91-ctp.trendmicro.com:443/wis/clicktime/v1/query?url=http%3a%2f%2fec2%2d54%2d175%2d75%2d248.compute%2d1.amazonaws.com%2fmw%2flatest%2findex.php%2fcampaigns%2fnb556ql9ddb23%2ftrack%2durl%2fdp682grpbdc61%2f88399dc6e28da407524359edbf65ede88632c3de&umid=B722AE36-0947-7206-8A91-E0FFEDDBF919&auth=04d8cbfb2262cbe07ceab943606e6e5d0148629e-902553d314c17c0c3f3df15f36ff6e785fe70181
-
https://imsva91-ctp.trendmicro.com:443/wis/clicktime/v1/query?url=http%3a%2f%2fec2%2d54%2d175%2d75%2d248.compute%2d1.amazonaws.com%2fmw%2flatest%2findex.php%2fcampaigns%2fnb556ql9ddb23%2ftrack%2durl%2fdp682grpbdc61%2f8cef40893a982e9e9a62ba7f5d23cdee6ce03f44&umid=B722AE36-0947-7206-8A91-E0FFEDDBF919&auth=04d8cbfb2262cbe07ceab943606e6e5d0148629e-ec040e3ee9df131ee5cc28518c4b3490dd8e80e4
-
https://imsva91-ctp.trendmicro.com:443/wis/clicktime/v1/query?url=http%3a%2f%2fec2%2d54%2d175%2d75%2d248.compute%2d1.amazonaws.com%2fmw%2flatest%2findex.php%2fcampaigns%2fnb556ql9ddb23%2ftrack%2durl%2fdp682grpbdc61%2f8cef40893a982e9e9a62ba7f5d23cdee6ce03f44&umid=B722AE36-0947-7206-8A91-E0FFEDDBF919&auth=04d8cbfb2262cbe07ceab943606e6e5d0148629e-ec040e3ee9df131ee5cc28518c4b3490dd8e80e4
-