Behavioral task
behavioral1
Sample
Fwd DB23-0879.msg
Resource
win10v2004-20240226-en
Behavioral task
behavioral2
Sample
Roberts - Signed Release of GC.pdf
Resource
win10v2004-20240419-en
General
-
Target
Fwd DB23-0879.msg
-
Size
661KB
-
MD5
4f77fdec882874a2fda8b1b3aa3f33c0
-
SHA1
ee0a2fdfc55356c5f718594464dee1ca07403a3a
-
SHA256
dc0dbd16414cf4da56f4f9ac53713c535d8b1cf4fceb3cae2ef709bacd20e448
-
SHA512
40d6a4d6172711aff65a8930b9e0e7feef35d54eea1c91e1500dc9b116a259f0e1ff2e054b7a9cdca0f7dd8833c50a30768520e54cb4bc01dd3d03e15583d34a
-
SSDEEP
12288:MDHkvZ79FtnGKOad5p/S24Da5HrwOaK+jJtsA7X57:lRbxNWaVrdH+jbf7X5
Malware Config
Signatures
-
Malformed data in PDF
A PDF can contain malformed data to evade detection
Files
-
Fwd DB23-0879.msg.msg
-
http://DM6NAM10FT069.eop-nam10.prod.protection.outlook.com
-
http://douglasnv.com
-
http://hotmail.com
-
http://microsoft.com
-
http://mx.microsoft.com
-
http://outlook.com
-
https://aka.ms/AAb9ysg
-
https://go.microsoft.com/fwlink/?LinkId=389361.
-
-
Roberts - Signed Release of GC.pdf.pdf