Static task
static1
Behavioral task
behavioral1
Sample
Quarantined Messages (10-06).zip
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
Quarantined Messages (10-06).zip
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
Mr. Etienne Broos.pdf
Resource
win7-20240419-en
Behavioral task
behavioral4
Sample
Mr. Etienne Broos.pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
Mr. H. Erkac.pdf
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
Mr. H. Erkac.pdf
Resource
win10v2004-20240426-en
General
-
Target
Quarantined Messages (10-06).zip
-
Size
1.1MB
-
MD5
0539b4a3d9cb57839fbd33af6987de07
-
SHA1
2be6772ce6c4fa73b7eac69e1084b196512bbcc6
-
SHA256
9f8ad2686d13789545b87f1287d005561fba53d2cf15abd40dade3b5c8d61987
-
SHA512
d206567050cd82b6fa38818c5a19ac2e61eab528e7b3b82f5d3349d39896700baf3bc49d332410364e8a1be87fdac1b4fe0bfb000e56908e3bbb13248a27d545
-
SSDEEP
24576:fm/2zfI9Ss3fcX7y8TzGZWEylmfWmVfGrofxA+KA9ah:fpbQNvd8TzGAEylcVe+xTKLh
Malware Config
Signatures
Files
-
Quarantined Messages (10-06).zip.zip
Password: infected
-
cad08141-7d32-4cf5-696b-08dc88fe8ee7/35ef11fb-7b4b-2064-3d17-5c581d5eef43.eml.eml
Password: infected
-
http://aka.ms/LearnAboutSenderIdentification
-
http://www.abnamro.com/
-
http://www.facebook.com/abnamro
-
http://www.twitter.com/abnamro
-
https://aka.ms/LearnAboutSenderIdentification
-
https://clicktime.symantec.com/32SjRXgFoVnPaz5WbZ1iFmp6H2?u=
-
https://clicktime.symantec.com/32SjRXgFoVnPaz5WbZ1iFmp6H2?u=http%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fabn-amro%2Fproducts
-
https://wholesale.banking.societegenerale.com/en/market-reg/
-
https://wholesale.banking.societegenerale.com/en/solutions-services/sustainable-and-positive-impact-finance/
-
https://www.dmo.gov.uk/data/gilt-market/historical-prices-and-yields/
- Show all
-
-
attachment-3.eml
Password: infected
-
http://aka.ms/LearnAboutSenderIdentification
-
http://www.abnamro.com/
-
http://www.facebook.com/abnamro
-
http://www.twitter.com/abnamro
-
https://aka.ms/LearnAboutSenderIdentification
-
https://clicktime.symantec.com/32SjRXgFoVnPaz5WbZ1iFmp6H2?u=
-
https://clicktime.symantec.com/32SjRXgFoVnPaz5WbZ1iFmp6H2?u=http%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fabn-amro%2Fproducts
-
https://wholesale.banking.societegenerale.com/en/market-reg/
-
https://wholesale.banking.societegenerale.com/en/solutions-services/sustainable-and-positive-impact-finance/
-
https://www.dmo.gov.uk/data/gilt-market/historical-prices-and-yields/
- Show all
-
-
Mr. Etienne Broos.pdf.pdf
Password: infected
-
Mr. H. Erkac.pdf.pdf
Password: infected
-
email-html-2.txt.html
-
email-plain-1.txt
-
image001.png.png
Password: infected
-
image002.png.png
Password: infected
-
image003.png.png
Password: infected
-
image004.png.png
Password: infected
-
image005.png.png
-
image006.png.png
-
image007.gif.gif
-
image008.gif.gif
-
image009.gif.gif
-
image010.png.png
-
image011.png.png
-
image012.png.png
-
image013.png.png
-
email-html-2.txt.html
-
email-plain-1.txt
-
image001.png.png
-
image002.png.png
-
image003.png.png
-
image004.png.png
-
image005.png.png
-
image006.png.png
-
image007.png.png
-
image008.png.png
-
image009.png.png
-
image010.gif.gif
-
image011.gif.gif
-
image012.gif.gif
-
image013.png.png
-
image014.png.png
-
image015.png.png
-
image016.png.png
-
image017.png.png