Overview
overview
5Static
static
1Quarantine...3).zip
windows7-x64
1Quarantine...3).zip
windows10-2004-x64
18dbed1bf-c...c1.eml
windows7-x64
58dbed1bf-c...c1.eml
windows10-2004-x64
3SERVICE BI...87.pdf
windows7-x64
1SERVICE BI...87.pdf
windows10-2004-x64
1email-html-2.html
windows7-x64
1email-html-2.html
windows10-2004-x64
1email-plain-1.txt
windows7-x64
1email-plain-1.txt
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Quarantined Messages(3).zip
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Quarantined Messages(3).zip
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
8dbed1bf-c866-4944-9e32-08dc80d946d8/e9c5e15e-0ff9-47f2-90fe-dbf18a5178c1.eml
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
8dbed1bf-c866-4944-9e32-08dc80d946d8/e9c5e15e-0ff9-47f2-90fe-dbf18a5178c1.eml
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
SERVICE BILL #5640687.pdf
Resource
win7-20240215-en
Behavioral task
behavioral6
Sample
SERVICE BILL #5640687.pdf
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
email-html-2.html
Resource
win7-20240419-en
Behavioral task
behavioral8
Sample
email-html-2.html
Resource
win10v2004-20240426-en
Behavioral task
behavioral9
Sample
email-plain-1.txt
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
email-plain-1.txt
Resource
win10v2004-20240508-en
General
-
Target
Quarantined Messages(3).zip
-
Size
449KB
-
MD5
37ff0c0fa4f1ff7352a4e7852e5a6736
-
SHA1
c4afec53a6b33f756a1ebda0c9fcf57c627f2be8
-
SHA256
0a485afe09dd6c2f32403450024e9a5ed09f1ffba6ddab00690c2ebda8be97ae
-
SHA512
d8277203f9743234d80cb157eb871a8cec18d2030509d3bb5f0f7bf3add2075b167d3d8de63c75d66bd012eccb811a092716093db9afe2f8a5c37daf5141d7d7
-
SSDEEP
12288:/xY52iixWSrIe+1EVDK3064lFMz2ORY4fIxZphxrWW:/68iWWQIzqVmE643LWnKnhx1
Malware Config
Signatures
Files
-
Quarantined Messages(3).zip.zip
Password: infected
-
8dbed1bf-c866-4944-9e32-08dc80d946d8/e9c5e15e-0ff9-47f2-90fe-dbf18a5178c1.eml.eml
Password: infected
-
SERVICE BILL #5640687.pdf.pdf
Password: infected
-
email-html-2.txt.html
-
email-plain-1.txt