Фишинг[.]7z

Sharing

Copy URL

Twitter E-mail

General

Target

Фишинг.7z
Size

1.2MB
MD5

e89282e50114f22c3a9a3de526099b4e
SHA1

cabdf997a61ae4bda523bdea6f950731f9d427c9
SHA256

d8cfa5a0ddbf5483a170f0a66b6579ddb1cac3e50cb784ea2db0a2d91717abc8
SHA512

d5ed27873ed7404b3aed501918e384d5ee728b94238fc7f8029f8cb079195c03d1109c91aa433a9ea09fc36fa39f3af7899a45e2f8cc475c2e80ea604268561a
SSDEEP

24576:pt7nnaWxsKo8OgkD8NzHE8lSXFUBkwbP73rwzYQujRCQc3pGP4jhcZxhIf6tIODy:TaWKHEkgzHE8wXE3P73XfjRgGP4FctIr

Score

3^/10

Malware Config

Signatures

Unsigned PE 3 IoCs

Checks for missing Authenticode signature.

resource
unpack003/счет для получения платежа.exe
unpack006/счет для получения платежа.exe
unpack009/счет для получения платежа.exe

Files

Фишинг.7z
.7z

Password: 2024
Фишинг/просмотреть вложение квитанции об оплате.msg
.msg
- http://www.fabrikant.ru
- http://zakupki.gov.ru
- https://proxy.imgsmail.ru/?e=1716455885&email=ip_marianapalade%40mail.ru&flags=0&h=MmeQjrqEnTGsLkuCEdzEOg&is_https=1&url173=c3RvcmFnZS55YW5kZXhjbG91ZC5uZXQvZmFicmxvZ28vTkVXX0xPR09faG9yaXpvbnRhbF8zMDAucG5n
- https://proxy.imgsmail.ru/?e=1716455885&email=ip_marianapalade%40mail.ru&flags=0&h=OFU8bvWTUrzLUdmbgsSFmg&is_https=1&url173=dXM0LXVzbmRyLmNvbS9ydS9tYWlsX3JlYWRfdHJhY2tlci8zNTEzNDg1P2hhc2g9Nm41amtheHpoaXB6eXRybnU4ajF4NTh3cjZ6c2Q4NmE1ZWJkbmRzNDNyaGNxOWM0YWhwN3ozNmVpbm1heGt0Z3N3azR6aDZtd2RiamV1cG1rYno1ZmQ2d3N5ZQ~~
- https://proxy.imgsmail.ru/?e=1716455885&email=ip_marianapalade%40mail.ru&flags=0&h=MmeQjrqEnTGsLkuCEdzEOg&is_https=1&url173=c3RvcmFnZS55YW5kZXhjbG91ZC5uZXQvZmFicmxvZ28vTkVXX0xPR09faG9yaXpvbnRhbF8zMDAucG5n
- https://proxy.imgsmail.ru/?e=1716455885&email=ip_marianapalade%40mail.ru&flags=0&h=OFU8bvWTUrzLUdmbgsSFmg&is_https=1&url173=dXM0LXVzbmRyLmNvbS9ydS9tYWlsX3JlYWRfdHJhY2tlci8zNTEzNDg1P2hhc2g9Nm41amtheHpoaXB6eXRybnU4ajF4NTh3cjZ6c2Q4NmE1ZWJkbmRzNDNyaGNxOWM0YWhwN3ozNmVpbm1heGt0Z3N3azR6aDZtd2RiamV1cG1rYno1ZmQ2d3N5ZQ~~
- https://us4-usndr.com/ru/mail_link_tracker?hash=6cyfqigxcqnc5ybouo9w8889iqmsd86a5ebdnds43rhcq9c4ahp7h7wn9habic9bej1qm19g7d8tgbiw1hpnm9e5g8y357iehi4auqujuk9nkn6gg94jy&url=aHR0cHM6Ly90Lm1lL0VUUEZhYnJpa2FudA~~&uid=MzUxMzQ4NQ~~&ucs=307fbc79b872ef6ddd94d67f3ad50c31
- https://us4-usndr.com/ru/mail_link_tracker?hash=6cyfqigxcqnc5ybouo9w8889iqmsd86a5ebdnds43rhcq9c4ahp7h7wn9habic9bej1qm19g7d8tgbiw1hpnm9e5g8y357iehi4auqujuk9nkn6gg94jy&url=aHR0cHM6Ly90Lm1lL0VUUEZhYnJpa2FudA~~&uid=MzUxMzQ4NQ~~&ucs=307fbc79b872ef6ddd94d67f3ad50c31
- https://us4-usndr.com/ru/mail_link_tracker?hash=6n8o5eewxhjw9abouo9w8889iqmsd86a5ebdnds43rhcq9c4ahp7uhubczygtwj1x56i1xnq6jg9xpiw1hpnm9e5g8y357iehi4auqujuk9nkn6gg94jy&url=aHR0cDovL3pha3Vwa2kuZ292LnJ1&uid=MzUxMzQ4NQ~~&ucs=5da39c75018a6a2f15ba9b0aea369c6b
- https://us4-usndr.com/ru/mail_link_tracker?hash=6n8o5eewxhjw9abouo9w8889iqmsd86a5ebdnds43rhcq9c4ahp7uhubczygtwj1x56i1xnq6jg9xpiw1hpnm9e5g8y357iehi4auqujuk9nkn6gg94jy&url=aHR0cDovL3pha3Vwa2kuZ292LnJ1&uid=MzUxMzQ4NQ~~&ucs=5da39c75018a6a2f15ba9b0aea369c6b
- https://us4-usndr.com/ru/mail_link_tracker?hash=6nu6rz3co69ruybouo9w8889iqmsd86a5ebdnds43rhcq9c4ahp7spmyj1uqsowesg6chhxcoiqtbuiw1hpnm9e5g8y357iehi4auqujuk9nkn6gg94jy&url=aHR0cHM6Ly93d3cuZmFicmlrYW50LnJ1Lz91dG1fc291cmNlPXNpdGUmdXRtX21lZGl1bT1vcmdhbmljJnV0bV9jYW1wYWlnbj1zaWduYXR1cmUmdXRtX2NvbnRlbnQ9bGluayZ1dG1fdGVybT1zaWduYXR1cmU~&uid=MzUxMzQ4NQ~~&ucs=f890860bc0cb6c50759f80c5864d4d29
- https://us4-usndr.com/ru/mail_link_tracker?hash=6nu6rz3co69ruybouo9w8889iqmsd86a5ebdnds43rhcq9c4ahp7spmyj1uqsowesg6chhxcoiqtbuiw1hpnm9e5g8y357iehi4auqujuk9nkn6gg94jy&url=aHR0cHM6Ly93d3cuZmFicmlrYW50LnJ1Lz91dG1fc291cmNlPXNpdGUmdXRtX21lZGl1bT1vcmdhbmljJnV0bV9jYW1wYWlnbj1zaWduYXR1cmUmdXRtX2NvbnRlbnQ9bGluayZ1dG1fdGVybT1zaWduYXR1cmU~&uid=MzUxMzQ4NQ~~&ucs=f890860bc0cb6c50759f80c5864d4d29
- Show all
счет для получения платежа.rar
.rar

Password: 2024
счет для получения платежа.exe
.exe windows:4 windows x86 arch:x86

Password: 2024

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

vgPf.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 753KB - Virtual size: 752KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Фишинг/просмотреть вложение квитанции об оплате2.msg
.msg
- http://www.fabrikant.ru
- http://zakupki.gov.ru
- https://proxy.imgsmail.ru/?e=1716455885&email=ip_marianapalade%40mail.ru&flags=0&h=MmeQjrqEnTGsLkuCEdzEOg&is_https=1&url173=c3RvcmFnZS55YW5kZXhjbG91ZC5uZXQvZmFicmxvZ28vTkVXX0xPR09faG9yaXpvbnRhbF8zMDAucG5n
- https://proxy.imgsmail.ru/?e=1716455885&email=ip_marianapalade%40mail.ru&flags=0&h=OFU8bvWTUrzLUdmbgsSFmg&is_https=1&url173=dXM0LXVzbmRyLmNvbS9ydS9tYWlsX3JlYWRfdHJhY2tlci8zNTEzNDg1P2hhc2g9Nm41amtheHpoaXB6eXRybnU4ajF4NTh3cjZ6c2Q4NmE1ZWJkbmRzNDNyaGNxOWM0YWhwN3ozNmVpbm1heGt0Z3N3azR6aDZtd2RiamV1cG1rYno1ZmQ2d3N5ZQ~~
- https://proxy.imgsmail.ru/?e=1716455885&email=ip_marianapalade%40mail.ru&flags=0&h=MmeQjrqEnTGsLkuCEdzEOg&is_https=1&url173=c3RvcmFnZS55YW5kZXhjbG91ZC5uZXQvZmFicmxvZ28vTkVXX0xPR09faG9yaXpvbnRhbF8zMDAucG5n
- https://proxy.imgsmail.ru/?e=1716455885&email=ip_marianapalade%40mail.ru&flags=0&h=OFU8bvWTUrzLUdmbgsSFmg&is_https=1&url173=dXM0LXVzbmRyLmNvbS9ydS9tYWlsX3JlYWRfdHJhY2tlci8zNTEzNDg1P2hhc2g9Nm41amtheHpoaXB6eXRybnU4ajF4NTh3cjZ6c2Q4NmE1ZWJkbmRzNDNyaGNxOWM0YWhwN3ozNmVpbm1heGt0Z3N3azR6aDZtd2RiamV1cG1rYno1ZmQ2d3N5ZQ~~
- https://us4-usndr.com/ru/mail_link_tracker?hash=6cyfqigxcqnc5ybouo9w8889iqmsd86a5ebdnds43rhcq9c4ahp7h7wn9habic9bej1qm19g7d8tgbiw1hpnm9e5g8y357iehi4auqujuk9nkn6gg94jy&url=aHR0cHM6Ly90Lm1lL0VUUEZhYnJpa2FudA~~&uid=MzUxMzQ4NQ~~&ucs=307fbc79b872ef6ddd94d67f3ad50c31
- https://us4-usndr.com/ru/mail_link_tracker?hash=6cyfqigxcqnc5ybouo9w8889iqmsd86a5ebdnds43rhcq9c4ahp7h7wn9habic9bej1qm19g7d8tgbiw1hpnm9e5g8y357iehi4auqujuk9nkn6gg94jy&url=aHR0cHM6Ly90Lm1lL0VUUEZhYnJpa2FudA~~&uid=MzUxMzQ4NQ~~&ucs=307fbc79b872ef6ddd94d67f3ad50c31
- https://us4-usndr.com/ru/mail_link_tracker?hash=6n8o5eewxhjw9abouo9w8889iqmsd86a5ebdnds43rhcq9c4ahp7uhubczygtwj1x56i1xnq6jg9xpiw1hpnm9e5g8y357iehi4auqujuk9nkn6gg94jy&url=aHR0cDovL3pha3Vwa2kuZ292LnJ1&uid=MzUxMzQ4NQ~~&ucs=5da39c75018a6a2f15ba9b0aea369c6b
- https://us4-usndr.com/ru/mail_link_tracker?hash=6n8o5eewxhjw9abouo9w8889iqmsd86a5ebdnds43rhcq9c4ahp7uhubczygtwj1x56i1xnq6jg9xpiw1hpnm9e5g8y357iehi4auqujuk9nkn6gg94jy&url=aHR0cDovL3pha3Vwa2kuZ292LnJ1&uid=MzUxMzQ4NQ~~&ucs=5da39c75018a6a2f15ba9b0aea369c6b
- https://us4-usndr.com/ru/mail_link_tracker?hash=6nu6rz3co69ruybouo9w8889iqmsd86a5ebdnds43rhcq9c4ahp7spmyj1uqsowesg6chhxcoiqtbuiw1hpnm9e5g8y357iehi4auqujuk9nkn6gg94jy&url=aHR0cHM6Ly93d3cuZmFicmlrYW50LnJ1Lz91dG1fc291cmNlPXNpdGUmdXRtX21lZGl1bT1vcmdhbmljJnV0bV9jYW1wYWlnbj1zaWduYXR1cmUmdXRtX2NvbnRlbnQ9bGluayZ1dG1fdGVybT1zaWduYXR1cmU~&uid=MzUxMzQ4NQ~~&ucs=f890860bc0cb6c50759f80c5864d4d29
- https://us4-usndr.com/ru/mail_link_tracker?hash=6nu6rz3co69ruybouo9w8889iqmsd86a5ebdnds43rhcq9c4ahp7spmyj1uqsowesg6chhxcoiqtbuiw1hpnm9e5g8y357iehi4auqujuk9nkn6gg94jy&url=aHR0cHM6Ly93d3cuZmFicmlrYW50LnJ1Lz91dG1fc291cmNlPXNpdGUmdXRtX21lZGl1bT1vcmdhbmljJnV0bV9jYW1wYWlnbj1zaWduYXR1cmUmdXRtX2NvbnRlbnQ9bGluayZ1dG1fdGVybT1zaWduYXR1cmU~&uid=MzUxMzQ4NQ~~&ucs=f890860bc0cb6c50759f80c5864d4d29
- Show all
счет для получения платежа.rar
.rar

Password: 2024
счет для получения платежа.exe
.exe windows:4 windows x86 arch:x86

Password: 2024

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

vgPf.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 753KB - Virtual size: 752KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Фишинг/счет для получения платежа.msg
.msg
- http://regionstal.com
- https://avatars.mds.yandex.net/get-mail-signature/1526739/4b60c33b2a60f90b948a7c3cc01c74ca/orig
- https://avatars.mds.yandex.net/get-mail-signature/1539903/18d651abdd48243abd1e3e510b3f3449/orig
- https://avatars.mds.yandex.net/get-mail-signature/222735/5a758820746d339036c36c22655392b7/orig
- https://avatars.mds.yandex.net/get-mail-signature/474754/43f50c62db0e7b79c038238bd893598f/orig
- https://regionstal.com
счет для получения платежа.rar
.rar

Password: 2024
счет для получения платежа.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

WIjA.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 753KB - Virtual size: 753KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: 2024

Password: 2024

Password: 2024

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 753KB - Virtual size: 752KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

Password: 2024

Password: 2024

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 753KB - Virtual size: 752KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

Password: 2024

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 753KB - Virtual size: 753KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

.text
Size: 753KB - Virtual size: 752KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 753KB - Virtual size: 752KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 753KB - Virtual size: 753KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B