General
-
Target
message__C6D015EF_536F_4098_AC31_329B3410A867_morugait_com_.eml
-
Size
427KB
-
MD5
f6eb3da6c85674072ea9ea1b43a23e73
-
SHA1
f7c44b8c376d7aa379d74d15d28fe539dfde836c
-
SHA256
c212600f1c4d309528c47cf5a05b47546f4d29518b9c80397bf94337f6783d5f
-
SHA512
e68652f9883d90148e2a77719c3548dff41d2aab320f79b53208c875ed959c17791c0e0bd783c87f542ce3b23824b57120e3e027f3062675c7a4a30240b39194
-
SSDEEP
12288:qKheA8xLD05s/6hlLfiae3FUxxXt/OgPMr:q28pD0WShlLa3gP2
Malware Config
Signatures
-
HTTP links in PDF interactive object 1 IoCs
Detects HTTP links in interactive objects within PDF files.
-
One or more HTTP URLs in PDF identified
Detects presence of HTTP links in PDF files.
Files
-
message__C6D015EF_536F_4098_AC31_329B3410A867_morugait_com_.eml
-
RFP Letter..Doc1.pdf
-
https://shared.outlook.inky.com/link?domain=public-usa.mkt.dynamics.com&t=h.eJyNkttu1DAQhl-lWim9IpvYsR2n0ooeKajqVq1oEVfIh3FqNnFC7CyqEO-OnaXcwAWWNcqMo_8fz-cfq3nqVidHq-cQRn9SFOMsO6vy2Yt1vwtr_eJEb5Vfq6EvxGiLYWp9oQ0oohjJG21wDoBQ3pSE56wkVOoSMVNBMRXGGDvI-y99mV89vFzrW1NxfH91FtfbIKYWwiarzzOMPy7J49TF76w6i3FpJ8M0JRS_W4LwHoL_Z2vL-f90dfjRtjaI7qC3VHwQTotucGCGqT_UWIONEoznFTX1QU4go1_lGs4bkvrFFzE-gLYTqHA3Bjs4__sey-XQIXFz12X1ZdzH0R982Fyf7xu5RaR7XwpPv879p_3YXm0_bHefL25wdztybp_2RN3cPWbV5bEHNUF4gslHh42gvKZNLaXGmkhRSUmqihimuQREAVZvjla7BNZBiMxMQLhmrEZFL6wL4IRTcPoMUxxEC99FSLIaFsw4jtGghhJGaS0xGMUpp0ioqi4NkrxAdRSjmBG0JjQZQTISurfudHbfXjkkDGlsCcIfBmtf0oSuYjRCbJNhUtBJ4e9ySG8T_fwFG8TNZQ.MEQCIFqjEgDx6nVLluabB15JkbXqjWLEpsII6hxeiISixyfxAiBJkCHvzNR-LTnRsNeV7MGJABpNrkAkNbTXNg3eaY27RA
-
-
email-html-2.txt
-
email-plain-1.txt
-
image001.png