Static task
static1
Behavioral task
behavioral1
Sample
Re_ Valeriya Margulis.eml (175 KB).msg
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Re_ Valeriya Margulis.eml (175 KB).msg
Resource
win10v2004-20240226-en
General
-
Target
Re_ Valeriya Margulis.eml (175 KB).msg
-
Size
87KB
-
MD5
cdd054efc903e6bf81e4b3d208482cdf
-
SHA1
578f8c13afb9dda37faf0276cc44cb40acee01aa
-
SHA256
8d8876a3d1538988d75593a114850b2281e777ae1f26302d2f785c4cb8142803
-
SHA512
d65c546c1012e418638e8e263e5914c6190b6171e3ff0298a308fbf4202ba2779fbc6ae43c3548c52d529b6505d0ff269ab4cbc40c800794d46482b68c54a731
-
SSDEEP
1536:/1RMZgNdMhQwO9L7rhDXOYgRVni8ykk/W/:7mJRDg/W/
Malware Config
Signatures
Files
-
Re_ Valeriya Margulis.eml (175 KB).msg.msg
-
http://enwww.agpd.es
-
http://gmail.com
-
http://radissonblu.com
-
http://www.agpd.es
-
http://www.radissonblu.com/pradohotel-madrid
-
https://ddec1-0-en-ctp.trendmicro.com/wis/clicktime/v1/query?url=http%3a%2f%2fradissonblu.com&umid=b30a0837-eea7-4d96-85a5-af5f487287f2&auth=84247b409afe2128671efe0c5790aaffcd4c1d5f-afb0f4a95e2845c2ffd3651f9ca757ef97fddaa7
-
https://ddec1-0-en-ctp.trendmicro.com/wis/clicktime/v1/query?url=http%3a%2f%2fradissonblu.com&umid=b30a0837-eea7-4d96-85a5-af5f487287f2&auth=84247b409afe2128671efe0c5790aaffcd4c1d5f-afb0f4a95e2845c2ffd3651f9ca757ef97fddaa7
-
https://ddec1-0-en-ctp.trendmicro.com/wis/clicktime/v1/query?url=http%3a%2f%2fwww.agpd.es&umid=b30a0837-eea7-4d96-85a5-af5f487287f2&auth=84247b409afe2128671efe0c5790aaffcd4c1d5f-e8c40bda5441abc984e59ca37887c63694f09081
-
https://ddec1-0-en-ctp.trendmicro.com/wis/clicktime/v1/query?url=http%3a%2f%2fwww.agpd.es&umid=b30a0837-eea7-4d96-85a5-af5f487287f2&auth=84247b409afe2128671efe0c5790aaffcd4c1d5f-e8c40bda5441abc984e59ca37887c63694f09081
-
https://ddec1-0-en-ctp.trendmicro.com/wis/clicktime/v1/query?url=http%3a%2f%2fwww.radissonblu.com%2fpradohotel%2dmadrid&umid=b30a0837-eea7-4d96-85a5-af5f487287f2&auth=84247b409afe2128671efe0c5790aaffcd4c1d5f-f40ffb485b33e030b63d969f6cfe3b37ac979471
-
https://ddec1-0-en-ctp.trendmicro.com/wis/clicktime/v1/query?url=http%3a%2f%2fwww.radissonblu.com%2fpradohotel%2dmadrid&umid=b30a0837-eea7-4d96-85a5-af5f487287f2&auth=84247b409afe2128671efe0c5790aaffcd4c1d5f-f40ffb485b33e030b63d969f6cfe3b37ac979471
-
https://ddec1-0-en-ctp.trendmicro.com/wis/clicktime/v1/query?url=https%3a%2f%2fes%2des.facebook.com%2fRadissonBluHotelMadridPrado%2f&umid=b30a0837-eea7-4d96-85a5-af5f487287f2&auth=84247b409afe2128671efe0c5790aaffcd4c1d5f-515f8bf3912393d0259fa5a0352d59286c1c35ab
-
https://ddec1-0-en-ctp.trendmicro.com/wis/clicktime/v1/query?url=https%3a%2f%2fes%2des.facebook.com%2fRadissonBluHotelMadridPrado%2f&umid=b30a0837-eea7-4d96-85a5-af5f487287f2&auth=84247b409afe2128671efe0c5790aaffcd4c1d5f-515f8bf3912393d0259fa5a0352d59286c1c35ab
-
https://ddec1-0-en-ctp.trendmicro.com/wis/clicktime/v1/query?url=https%3a%2f%2ftwitter.com%2fradissonblumadr&umid=b30a0837-eea7-4d96-85a5-af5f487287f2&auth=84247b409afe2128671efe0c5790aaffcd4c1d5f-d0746abe452b46bf77fe0dca96544ee8dadfb869
-
https://ddec1-0-en-ctp.trendmicro.com/wis/clicktime/v1/query?url=https%3a%2f%2ftwitter.com%2fradissonblumadr&umid=b30a0837-eea7-4d96-85a5-af5f487287f2&auth=84247b409afe2128671efe0c5790aaffcd4c1d5f-d0746abe452b46bf77fe0dca96544ee8dadfb869
-
https://ddec1-0-en-ctp.trendmicro.com/wis/clicktime/v1/query?url=https%3a%2f%2fwww.instagram.com%2fradissonblumadrid%2f&umid=b30a0837-eea7-4d96-85a5-af5f487287f2&auth=84247b409afe2128671efe0c5790aaffcd4c1d5f-e79ba490610b450b10b930c687302e9549d3d4d4
-
https://ddec1-0-en-ctp.trendmicro.com/wis/clicktime/v1/query?url=https%3a%2f%2fwww.instagram.com%2fradissonblumadrid%2f&umid=b30a0837-eea7-4d96-85a5-af5f487287f2&auth=84247b409afe2128671efe0c5790aaffcd4c1d5f-e79ba490610b450b10b930c687302e9549d3d4d4
-
https://ddec1-0-en-ctp.trendmicro.com/wis/clicktime/v1/query?url=https%3a%2f%2fwww.radissonblu.com%2fen%2fpradohotel%2dmadrid&umid=b30a0837-eea7-4d96-85a5-af5f487287f2&auth=84247b409afe2128671efe0c5790aaffcd4c1d5f-ad4d5b2a46695a967a8f1f7fb4c8b83a85e33933
-
https://ddec1-0-en-ctp.trendmicro.com/wis/clicktime/v1/query?url=https%3a%2f%2fwww.radissonblu.com%2fen%2fpradohotel%2dmadrid&umid=b30a0837-eea7-4d96-85a5-af5f487287f2&auth=84247b409afe2128671efe0c5790aaffcd4c1d5f-ad4d5b2a46695a967a8f1f7fb4c8b83a85e33933
-
https://es-es.facebook.com/RadissonBluHotelMadridPrado/
-
https://twitter.com/radissonblumadr
-
https://www.instagram.com/radissonblumadrid/
-
https://www.radissonblu.com/en/pradohotel-madrid
-
http://info.madrid
-
http://radissonhotels.com
- Show all
-