Overview
overview
5Static
static
598e45ae0-7...c0.eml
windows7-x64
598e45ae0-7...c0.eml
windows10-2004-x64
3email-html-2.html
windows7-x64
1email-html-2.html
windows10-2004-x64
1email-plain-1.txt
windows7-x64
1email-plain-1.txt
windows10-2004-x64
1nc08914117...40.zip
windows7-x64
1nc08914117...40.zip
windows10-2004-x64
1adnc089141...40.xml
windows7-x64
1adnc089141...40.xml
windows10-2004-x64
1nc08914117...40.pdf
windows7-x64
1nc08914117...40.pdf
windows10-2004-x64
1Behavioral task
behavioral1
Sample
98e45ae0-73de-ae18-6b99-7366779278c0.eml
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
98e45ae0-73de-ae18-6b99-7366779278c0.eml
Resource
win10v2004-20240412-en
Behavioral task
behavioral3
Sample
email-html-2.html
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
email-html-2.html
Resource
win10v2004-20240412-en
Behavioral task
behavioral5
Sample
email-plain-1.txt
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
email-plain-1.txt
Resource
win10v2004-20240412-en
Behavioral task
behavioral7
Sample
nc0891411743000240.zip
Resource
win7-20240220-en
Behavioral task
behavioral8
Sample
nc0891411743000240.zip
Resource
win10v2004-20240412-en
Behavioral task
behavioral9
Sample
adnc0891411743000240.xml
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
adnc0891411743000240.xml
Resource
win10v2004-20240412-en
Behavioral task
behavioral11
Sample
nc0891411743000240.pdf
Resource
win7-20240220-en
Behavioral task
behavioral12
Sample
nc0891411743000240.pdf
Resource
win10v2004-20240412-en
General
-
Target
98e45ae0-73de-ae18-6b99-7366779278c0.eml
-
Size
105KB
-
MD5
5e5b2032a5c3ce440bb4fd47b3f966b3
-
SHA1
b43fcc6357e7b498fddef6ed4f75608eb421ab60
-
SHA256
87e911ca04a8c40061541d9054733b70c50b5e740e38094a14859e59b21e7b94
-
SHA512
409af76f310042610a59ea968962ab2f35ab116d71659e60f98fa8dda7fade28f28f7e46835d1f57bace2013bb9d1d11792ac2d8bc1199c7f4da301747fcf08b
-
SSDEEP
3072:+G4oEtz/qlVyEMR9YUH1v6t7tgKG2UPZk:QNtmlVyEspH1v6t7v4hk
Malware Config
Signatures
-
Malformed data in PDF
A PDF can contain malformed data to evade detection
Files
-
98e45ae0-73de-ae18-6b99-7366779278c0.eml.eml
-
http://tracking.sisfo.com/tracking/botclick?msgid=zTzCFEVUbVY7K1qWcKlD8g2&c=1418879154463635819
-
http://tracking.sisfo.com/tracking/click?d=1Gt8nneqnsS3lEs3pk8-9NLn6U1Jv0tDAxqsnVCyx98BPXYlX4TBCxj8WR_DKnzroLzAGcxK5-_mj52_EFIz525cByf7L9CNRNDwqlaftLFViVdzgwcfGQh8GdLK-u6LbZc6-u7bL_oRAd4uLwNgbZjt57kPLN-ha5kKhIjMUWGV0
-
http://tracking.sisfo.com/tracking/unsubscribe?d=ePE8Qq4vJVE07kgjYUJfO63gLL_zfVr5jA-a0fIsgTgHyqo4bAJp4t4B7hzghsu1E4FrD2aqcC7MKgsPQrltGIVfQm6ScIWl0uFjPet_WXTt0
-
-
email-html-2.txt.html
-
email-plain-1.txt
-
nc0891411743000240.zip.zip
-
adnc0891411743000240.xml.xml
-
nc0891411743000240.pdf.pdf