Overview
overview
5Static
static
5Fwd_ Karta...on.eml
windows7-x64
5Fwd_ Karta...on.eml
windows10-2004-x64
3Karta Pokl...on.eml
windows7-x64
5Karta Pokl...on.eml
windows10-2004-x64
3LOTboardingPass.pdf
windows7-x64
1LOTboardingPass.pdf
windows10-2004-x64
1email-html-1.html
windows7-x64
1email-html-1.html
windows10-2004-x64
1email-html-1.html
windows7-x64
1email-html-1.html
windows10-2004-x64
1Behavioral task
behavioral1
Sample
Fwd_ Karta Pokladowa LOT_ LOT Boarding Pass Confirmation.eml
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
Fwd_ Karta Pokladowa LOT_ LOT Boarding Pass Confirmation.eml
Resource
win10v2004-20240611-en
Behavioral task
behavioral3
Sample
Karta Pokladowa LOT_ LOT Boarding Pass Confirmation.eml
Resource
win7-20240611-en
Behavioral task
behavioral4
Sample
Karta Pokladowa LOT_ LOT Boarding Pass Confirmation.eml
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
LOTboardingPass.pdf
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
LOTboardingPass.pdf
Resource
win10v2004-20240611-en
Behavioral task
behavioral7
Sample
email-html-1.html
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
email-html-1.html
Resource
win10v2004-20240611-en
Behavioral task
behavioral9
Sample
email-html-1.html
Resource
win7-20240508-en
Behavioral task
behavioral10
Sample
email-html-1.html
Resource
win10v2004-20240611-en
General
-
Target
Fwd_ Karta Pokladowa LOT_ LOT Boarding Pass Confirmation.eml
-
Size
125KB
-
MD5
052dfc4084072913cc0a5bc56616c1b3
-
SHA1
85fa76ea31411819262f5a89080c8a5c193b630f
-
SHA256
14aaaad47b1e51c80e6d48db7cb1971568b59c5b8bfc44cf359831ad094447c2
-
SHA512
05cd940c171713551283aaf54ac43056d4b87f9c95809cfd71104a118dbcc841ca52141b53610ea822f1d38644a022868a6e9957fdf9396c6bc00414327b1fa2
-
SSDEEP
3072:ZX1mglIgq+ysH6idRDrYClPFm5b+zsQep0JeU6oF:ZX1mgbyEpbs8PFmZ+zPeEL
Malware Config
Signatures
-
Malformed data in PDF
A PDF can contain malformed data to evade detection
Files
-
Fwd_ Karta Pokladowa LOT_ LOT Boarding Pass Confirmation.eml.eml
-
https://aka.ms/AAb9ysg
-
-
Karta Pokladowa LOT_ LOT Boarding Pass Confirmation.eml.eml
-
http://www.lot.com/
-
https://checkin.si.amadeus.net/1ASIHSSCMCILO/sscmlo/bp?IFOI=DCS&id=D669BE2785204AB9A350EC0D64181409&ln=en
-
-
LOTboardingPass.pdf.pdf
-
email-html-1.txt.html
-
email-html-1.txt.html