Overview
overview
5Static
static
1Fw_ Re_ Ko...et.eml
windows7-x64
5Fw_ Re_ Ko...et.eml
windows10-2004-x64
3attachment-3.eml
windows7-x64
5attachment-3.eml
windows10-2004-x64
3email-html-2.html
windows7-x64
1email-html-2.html
windows10-2004-x64
1email-plain-1.txt
windows7-x64
1email-plain-1.txt
windows10-2004-x64
1email-html-2.html
windows7-x64
1email-html-2.html
windows10-2004-x64
1email-plain-1.txt
windows7-x64
1email-plain-1.txt
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Fw_ Re_ Kopie spreadsheet.eml
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
Fw_ Re_ Kopie spreadsheet.eml
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
attachment-3.eml
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
attachment-3.eml
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
email-html-2.html
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
email-html-2.html
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
email-plain-1.txt
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
email-plain-1.txt
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
email-html-2.html
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
email-html-2.html
Resource
win10v2004-20240426-en
Behavioral task
behavioral11
Sample
email-plain-1.txt
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
email-plain-1.txt
Resource
win10v2004-20240426-en
General
-
Target
Fw_ Re_ Kopie spreadsheet.eml
-
Size
47KB
-
MD5
1e9a19a326d81ed02d1378829d00c04a
-
SHA1
0a83c2da7c597a73d205dbfa507ad231307d70c6
-
SHA256
41e26f54e4440e5a21ec73fe62bd2d9d03615886d30d33f772a98abcf74eb9c1
-
SHA512
6f30613f3c5fac8aae3d233b9ad953a751f3ac67f106d521d3a9b6384280fb08dc240b7bb7d15096d56f6be22b6b251c72a5a01ddde2aa34d400793841bc543e
-
SSDEEP
768:iK6CqoQkuucAdZQ3uujt8Rk3WNqUCngRoajCfE:iK1qNk73437jtwkUqDTM
Malware Config
Signatures
Files
-
Fw_ Re_ Kopie spreadsheet.eml.eml
Password: infected
-
http://www.nwz.nl/
-
https://go.microsoft.com/fwlink/?LinkId=389361
-
-
attachment-3.eml
Password: infected
-
http://www.nwz.nl/
-
-
email-html-2.txt.html
-
email-plain-1.txt
-
email-html-2.txt.html
-
email-plain-1.txt