Overview
overview
5Static
static
4Mensajes e...7).zip
windows7-x64
1Mensajes e...7).zip
windows10-2004-x64
179bc2107-a...19.eml
windows7-x64
579bc2107-a...19.eml
windows10-2004-x64
301DEMANDA.pdf
windows7-x64
101DEMANDA.pdf
windows10-2004-x64
102ActaReparto.pdf
windows7-x64
102ActaReparto.pdf
windows10-2004-x64
103. AUTO Q...19.pdf
windows7-x64
103. AUTO Q...19.pdf
windows10-2004-x64
104. OFICIO...19.pdf
windows7-x64
104. OFICIO...19.pdf
windows10-2004-x64
1Outlook-25jgxain.png
windows7-x64
3Outlook-25jgxain.png
windows10-2004-x64
3Outlook-fad5tdcw.png
windows7-x64
3Outlook-fad5tdcw.png
windows10-2004-x64
3email-html-2.html
windows7-x64
1email-html-2.html
windows10-2004-x64
1email-plain-1.txt
windows7-x64
1email-plain-1.txt
windows10-2004-x64
1Behavioral task
behavioral1
Sample
Mensajes en cuarentena (7).zip
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
Mensajes en cuarentena (7).zip
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
79bc2107-a884-478b-18e7-08dc75a87d63/0eb16640-bc13-959a-5dc9-792a4e440f19.eml
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
79bc2107-a884-478b-18e7-08dc75a87d63/0eb16640-bc13-959a-5dc9-792a4e440f19.eml
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
01DEMANDA.pdf
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
01DEMANDA.pdf
Resource
win10v2004-20240426-en
Behavioral task
behavioral7
Sample
02ActaReparto.pdf
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
02ActaReparto.pdf
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
03. AUTO QUE ADMITE TUTELA RAD. 2024-10019.pdf
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
03. AUTO QUE ADMITE TUTELA RAD. 2024-10019.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
04. OFICIOS DE AUTO QUE ADMITE TUTELA RAD. 2024-10019.pdf
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
04. OFICIOS DE AUTO QUE ADMITE TUTELA RAD. 2024-10019.pdf
Resource
win10v2004-20240426-en
Behavioral task
behavioral13
Sample
Outlook-25jgxain.png
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
Outlook-25jgxain.png
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
Outlook-fad5tdcw.png
Resource
win7-20240508-en
Behavioral task
behavioral16
Sample
Outlook-fad5tdcw.png
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
email-html-2.html
Resource
win7-20240508-en
Behavioral task
behavioral18
Sample
email-html-2.html
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
email-plain-1.txt
Resource
win7-20240508-en
Behavioral task
behavioral20
Sample
email-plain-1.txt
Resource
win10v2004-20240426-en
General
-
Target
Mensajes en cuarentena (7).zip
-
Size
4.7MB
-
MD5
6af620fbe3dff5aa4cc16afde3409100
-
SHA1
7cb27c3afe6b3def0c361670cff2bfa28e2619a2
-
SHA256
84921e494dc11cabd48f9be6daf5760d3b97275c07fad9137a8f18d5e5d057d7
-
SHA512
c7e406fcd27c2a84a86f952b594f67cd2d4d9386a9207bc16d3f5f2e14a9371bdeaf25657cf020bbf0e8b65994a5811ba43ed918920466869033fece53329ea0
-
SSDEEP
98304:90KVW2RWP3FVnu9cmMKoBWE1wEOUnhTixDlKXuXAyicz21oHq4J5PmfDAGQ5lN99:iKrE/ueKoJHdTgcmAgmmH5ufDAdlYg
Malware Config
Signatures
-
HTTP links in PDF interactive object 1 IoCs
Detects HTTP links in interactive objects within PDF files.
resource yara_rule static1/unpack002/04. OFICIOS DE AUTO QUE ADMITE TUTELA RAD. 2024-10019.pdf pdf_with_link_action
Files
-
Mensajes en cuarentena (7).zip.zip
Password: 22
-
79bc2107-a884-478b-18e7-08dc75a87d63/0eb16640-bc13-959a-5dc9-792a4e440f19.eml.eml
Password: 22
-
https://forms.office.com/r/rP3c6E7fDy
-
-
01DEMANDA.pdf.pdf
Password: 22
-
http://gmail.com
-
http://que.la/
-
https://www.adres.gov.co/lupa-al-giro/reclamanciones/persona-natural
-
https://www.adres.gov.co/lupa-al-giro/reclamanciones/persona-naturales-CO
-
https://www.corteconstitucional.gov.co/relatoria/2018/t-115-18.htm#_ftn26
-
https://www.funcionpublica.gov.co/eva/gestornormativo/norma.php?i=92046#_ftn76
-
https://www.funcionpublica.gov.co/eva/gestornormativo/norma.php?i=92046#_ftn78
-
https://www.funcionpublica.gov.co/eva/gestornormativo/norma.php?i=92046#_ftn80
-
-
02ActaReparto.pdf.pdf
Password: 22
-
03. AUTO QUE ADMITE TUTELA RAD. 2024-10019.pdf.pdf
Password: 22
-
04. OFICIOS DE AUTO QUE ADMITE TUTELA RAD. 2024-10019.pdf.pdf
Password: 22
-
http://www.ramajudicial.gov.co/
-
-
Outlook-25jgxain.png.png
Password: 22
-
Outlook-fad5tdcw.png.png
Password: 22
-
email-html-2.txt.html
-
email-plain-1.txt