Static task
static1
Behavioral task
behavioral1
Sample
Potential Phish_ [EXTERNAL] Zycus Supplier Network Account Creation Notification.eml
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Potential Phish_ [EXTERNAL] Zycus Supplier Network Account Creation Notification.eml
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
Headers.eml
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
Headers.eml
Resource
win10v2004-20240611-en
Behavioral task
behavioral5
Sample
email-html-2.txt
Resource
win7-20240611-en
Behavioral task
behavioral6
Sample
email-html-2.txt
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
email-plain-1.txt
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
email-plain-1.txt
Resource
win10v2004-20240508-en
General
-
Target
Potential Phish_ [EXTERNAL] Zycus Supplier Network Account Creation Notification.eml
-
Size
71KB
-
MD5
839499bb6d6bed6ad78fdd69793be80e
-
SHA1
e539edb5a3d52b8fb60003bff1942c75d8cee0ae
-
SHA256
4279b1acf5bdfd3e9a02e2faabc183a8c8544954a2868cf104b23258391dea95
-
SHA512
aa724a704b1862b5696be9784906e5cecc883c94b4ce911b11babd4e4e7fa2723f90f17024fc5190c8d546dd749bfaaeac07e06daad7da43eea49c8a8da5353d
-
SSDEEP
1536:UKwwZwBKPrjQ4xT6pViCuGdtK4j05GojKU7U2uEGml+B0YQC8mV:UKwwZwBK+KeUy50YHV
Malware Config
Signatures
Files
-
Potential Phish_ [EXTERNAL] Zycus Supplier Network Account Creation Notification.eml.eml
Password: infected
-
-
http://www.ienova.com.mx/privacidad.php
-
http://www.ienova.com.mx/privacidad.php__;!!DHZoJIs!t6W_54MxZLhGlRhEUMUwLXvRXA7KgeOE0BsmyfIjWknHYOcAJTQ71NgoblGYDwsOP3BaGPo87EeEi6GIpLZbNA$
-
https://dewdrops.zycus.com/zsp/guest/genericRegister/DEA505
-
https://dewdrops.zycus.com/zsp/guest/genericRegister/DEA505__;!!D1sDotPi8BGI9gw!mRRbzmXWok2CR0MQAxya9PXtZVLA4XgZemgvTaQiZzpONmzU7mMAcrdn6JL40nQ0KBXi1J4GwaJIF3cdTw$
-
https://dewdrops.zycus.com/zsp/guest/genericRegister/DEA505__;!!DHZoJIs!t6W_54MxZLhGlRhEUMUwLXvRXA7KgeOE0BsmyfIjWknHYOcAJTQ71NgoblGYDwsOP3BaGPo87EeEi6Fl0HeNcA$
-
https://us-phishalarm-ewt.proofpoint.com/EWT/v1/D1sDotPi8BGI9gw!xtWMwaM44YOlegslDrJ53ku3d6wYl9tfKf78nLBz_QQlnYXLXHTbmVmHQLNE3CIsJT1Sr44-noLzHA04KGh3rTxHcVFaUZKkznX_cPTfEJbW74r3QDsoSAPoXGSpuzCsFyhuAmKbuKGP$
-
https://us-phishalarm-ewt.proofpoint.com/EWT/v1/D1sDotPi8BGI9gw!yfWIpS5_wg_EumlNQd7Zcnv-HhsAwD2LatifFp2Jq0U8HO-NH1kTQexH27lgMdb4MgDM6sDlPYrELv0ZNjsKdV7Iefqn$
-
https://zsn.zycus.com/api/ackMail?id=3d545bf9-3af1-4b26-b38e-fffa4af54e1c__;!!DHZoJIs!t6W_54MxZLhGlRhEUMUwLXvRXA7KgeOE0BsmyfIjWknHYOcAJTQ71NgoblGYDwsOP3BaGPo87EeEi6FB4oGZJA$
-
-
Headers.txt.eml
-
email-html-2.txt
-
email-plain-1.txt