Static task
static1
Behavioral task
behavioral1
Sample
dcb1f906-1ec7-4fe1-9db5-08dc78ba4430/9e8c7b42-38cd-a85f-332e-4eb1ee3bc9d5.eml
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
dcb1f906-1ec7-4fe1-9db5-08dc78ba4430/9e8c7b42-38cd-a85f-332e-4eb1ee3bc9d5.eml
Resource
win10v2004-20240226-en
General
-
Target
Quarantined Messages (18).zip
-
Size
70KB
-
MD5
2858e214bd855499f3726cd81e6bf8df
-
SHA1
f722e1d92c3e9b3263bd294ada6f36d84dd750fd
-
SHA256
7916fdc1820b1b00675ba65f866bfbec96e809a7dc2cf88eb61689c87815a5ec
-
SHA512
826f87589d6b3fc8f94b17124e8b87d64dd66e55959c51b16d041f51727a925d22d161111c58c2fba440f9d0abb21928c058515859b58489d447e88ad118c8f0
-
SSDEEP
1536:+cmCVE672zYtUZSS2rc/EztNQOoZO2w4CsfyZMfRTpcjRIGB:+cmC6ERLSScWEOEHw46M5T6jRIGB
Malware Config
Signatures
Files
-
Quarantined Messages (18).zip.zip
Password: infected
-
dcb1f906-1ec7-4fe1-9db5-08dc78ba4430/9e8c7b42-38cd-a85f-332e-4eb1ee3bc9d5.eml.eml
Password: infected
-
https://mail.onelink.me/107872968?pid=NativePlacement&c=Global_Acquisition_YMktg_315_EmailSignatureGrowth_YahooMail:Search,Organize,Conquer&af_sub1=Acquisition&af_sub2=Global_YMktg&af_sub3=&af_sub4=100000945&af_sub5=OrganizeConquer__Static_
-
-
=?UTF-8?b?ZmFjZWJvb2tfMTcxNjIwMjAwNjE1Ml83MTk4MjcyOTM5MjEzMzg0MjczLmpwZw==?=.jpg
Password: infected
-
email-html-2.txt.html
-
email-plain-1.txt