Overview
overview
5Static
static
4attachment (5).eml
windows7-x64
52. Folleto MGPP.pdf
windows7-x64
14. FORMATO...S.docx
windows7-x64
4=?utf-8?B?...?=.pdf
windows7-x64
1=?utf-8?B?...=.docx
windows7-x64
4=?utf-8?B?...=.docx
windows7-x64
4=?utf-8?B?...=.docx
windows7-x64
4=?utf-8?B?...ma.pdf
windows7-x64
1=?utf-8?B?...?=.pdf
windows7-x64
1=?utf-8?B?...?=.pdf
windows7-x64
1email-html-2.html
windows7-x64
1email-plain-1.txt
windows7-x64
1Behavioral task
behavioral1
Sample
attachment (5).eml
Resource
win7-20240508-es
Behavioral task
behavioral2
Sample
2. Folleto MGPP.pdf
Resource
win7-20240419-es
Behavioral task
behavioral3
Sample
4. FORMATO HOJA DE VIDA UIS.docx
Resource
win7-20240508-es
Behavioral task
behavioral4
Sample
=?utf-8?B?MS4gQ2FydGEgSW52aXRhY2nDs24gYXNwaXJhbnRlLnBkZg==?=.pdf
Resource
win7-20240508-es
Behavioral task
behavioral5
Sample
=?utf-8?B?My4gRk9STVVMQVJJTyBERSBJTlNDUklQQ0nDk04uZG9jeA==?=.docx
Resource
win7-20240221-es
Behavioral task
behavioral6
Sample
=?utf-8?B?NS4gQ0FSVEEgUkVGRVJFTkNJQSBBQ0FEw4lNSUNBLmRvY3g=?=.docx
Resource
win7-20240215-es
Behavioral task
behavioral7
Sample
=?utf-8?B?Ni4gQ0FSVEEgQVZBTCBHUlVQTyBERSBJTlZFU1RJR0FDScOTTi5kb2N4?=.docx
Resource
win7-20231129-es
Behavioral task
behavioral8
Sample
=?utf-8?B?Ny4gR3J1cG9zIGRlIGludmVzdGlnYWNpw7NuIHF1ZSBhcG95YW4gZWwgcHJv?= =?utf-8?Q?grama.pdf
Resource
win7-20240419-es
Behavioral task
behavioral9
Sample
=?utf-8?B?OC4gSW5zdHJ1Y3Rpdm8gUGFnbyBkZSBJbnNjcmlwY2nDs24ucGRm?=.pdf
Resource
win7-20240508-es
Behavioral task
behavioral10
Sample
=?utf-8?B?OS4gUHJvY2VzbyBkZSBJbnNjcmlwY2nDs24gYSBQb3NncmFkb3MucGRm?=.pdf
Resource
win7-20240508-es
Behavioral task
behavioral11
Sample
email-html-2.html
Resource
win7-20240220-es
Behavioral task
behavioral12
Sample
email-plain-1.txt
Resource
win7-20240221-es
General
-
Target
attachment (5).eml
-
Size
4.0MB
-
MD5
d4028a736139d4394ec6bf7a5cf6d5bf
-
SHA1
637a4590eb41f8941d7ec13bf8011949111d14e7
-
SHA256
4869ed3207470e39f955b543e578321a207b841a26682d2390459a8152af264c
-
SHA512
4dd720a5e9a2ddf2476765a96ba149f7f0dfab9f5fac1243fc98702eede01ecf4c77335d959c4968cd4bafc95c6019c5f591d9e58f3c38be6eb87f3c22c39251
-
SSDEEP
49152:jfOvxIRpb9MlzR0hd7uCzfZO2tkCz5HbsRcuhvQJUW5xq:+
Malware Config
Signatures
-
HTTP links in PDF interactive object 2 IoCs
Detects HTTP links in interactive objects within PDF files.
resource yara_rule static1/unpack001/=?utf-8?B?MS4gQ2FydGEgSW52aXRhY2nDs24gYXNwaXJhbnRlLnBkZg==?= pdf_with_link_action static1/unpack001/=?utf-8?B?Ny4gR3J1cG9zIGRlIGludmVzdGlnYWNpw7NuIHF1ZSBhcG95YW4gZWwgcHJv?= =?utf-8?Q?grama.pdf?= pdf_with_link_action
Files
-
attachment (5).eml.eml
-
http://www.uis.edu.co/
-
https://aka.ms/LearnAboutSenderIdentification
-
https://uis.edu.co/fh-posm-politicasp-es/
-
-
2. Folleto MGPP.pdf.pdf
-
4. FORMATO HOJA DE VIDA UIS.docx.docx office2007
-
=?utf-8?B?MS4gQ2FydGEgSW52aXRhY2nDs24gYXNwaXJhbnRlLnBkZg==?=.pdf
-
http://uis.edu.co
-
http://www.uis.edu.co
-
https://www.uis.edu.co/procesoInscripcionPos/inscripcionEstudiante.seam
-
https://www.uis.edu.co/ventas_web/indexUIS.jsp
-
-
=?utf-8?B?My4gRk9STVVMQVJJTyBERSBJTlNDUklQQ0nDk04uZG9jeA==?=.docx office2007
-
=?utf-8?B?NS4gQ0FSVEEgUkVGRVJFTkNJQSBBQ0FEw4lNSUNBLmRvY3g=?=.docx office2007
-
=?utf-8?B?Ni4gQ0FSVEEgQVZBTCBHUlVQTyBERSBJTlZFU1RJR0FDScOTTi5kb2N4?=.docx office2007
-
=?utf-8?B?Ny4gR3J1cG9zIGRlIGludmVzdGlnYWNpw7NuIHF1ZSBhcG95YW4gZWwgcHJv?= =?utf-8?Q?grama.pdf?=.pdf
-
http://uis.edu.co
-
https://uis.edu.co/fh-gruinv-emar-es/
-
https://uis.edu.co/fh-gruinv-gidrot-es/
-
-
=?utf-8?B?OC4gSW5zdHJ1Y3Rpdm8gUGFnbyBkZSBJbnNjcmlwY2nDs24ucGRm?=.pdf
-
https://uis.edu.co/inicio/
-
-
=?utf-8?B?OS4gUHJvY2VzbyBkZSBJbnNjcmlwY2nDs24gYSBQb3NncmFkb3MucGRm?=.pdf
-
http://www.uis.edu.co/
-
-
email-html-2.txt.html
-
email-plain-1.txt