Static task
static1
Behavioral task
behavioral1
Sample
Re F252782-TransLink Fare Infraction (📫 Action Required).msg
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
Re F252782-TransLink Fare Infraction (📫 Action Required).msg
Resource
win10v2004-20240611-en
General
-
Target
Re F252782-TransLink Fare Infraction (📫 Action Required).msg
-
Size
98KB
-
MD5
aceb5e3e55a161362ca2b62c2075d082
-
SHA1
022d631dfcba23b9bc6ced9aba544084e88e9d87
-
SHA256
eb71bd8f6e6ceb6e331f5504181a3f73c84fdc2f26a74991fb4af83a4201d425
-
SHA512
652540fc879b8c0f2bfe2e8ff18072f4188866b9212b3b9f29641def0c846e5abe81a8213926ffb8aa7b18d6de17b1bbd587d554447281265fb3f329a50841b1
-
SSDEEP
1536:mmO67Z1ZC1oU8bKw154AAGWBWW+fyUa+M+EWclsdjQW:q677ZC1oUaKw1RRfMLA
Malware Config
Signatures
Files
-
Re F252782-TransLink Fare Infraction (📫 Action Required).msg.msg
-
http://Boxbe.com
-
http://boxbe.com
-
http://yahoo.com
-
https://aka.ms/LearnAboutSenderIdentification
-
https://d25lk0qhi6nhi8.cloudfront.net/static-images/email/boxbe_logo.png
-
https://elshopo.usw2.sparkpostopens.com/p/v1?tlid=9dnaqyfrwf&cid=&sid=&rid=
-
https://elshopo.usw2.sparkpostopens.com/p/v1?tlid=9dnaqyfrwf&cid=&sid=&rid=
-
https://info.sparkpost.com/f/a/56GS9GeN_8G1pGeYFzHqUw~~/AAAAfQA~/RgRoYCv2P0QWaHR0cHM6Ly93d3cuYm94YmUuY29tL1cDc3BjQgpmffamfWYB-BBiUhtGYXJlSW5mcmFjdGlvbkB0cmFuc2xpbmsuY2FYBAAADTA~
-
https://info.sparkpost.com/f/a/DpfU4zohJp5T_dVxKqbOfw~~/AAAAfQA~/RgRoYCv2P0SNaHR0cHM6Ly93d3cuYm94YmUuY29tL3ByaXZhY3k_dGNfc2VyaWFsPTYwMzI2ODg3MDAwJnRjX3JhbmQ9NzM0NDg2ODA4JnV0bV9zb3VyY2U9c3RmJnV0bV9tZWRpdW09ZW1haWwmdXRtX2NhbXBhaWduPUNOX1NURFdfdjYmdXRtX2NvbnRlbnQ9MDAzVwNzcGNCCmZ99qZ9ZgH4EGJSG0ZhcmVJbmZyYWN0aW9uQHRyYW5zbGluay5jYVgEAAANMA~~
-
https://info.sparkpost.com/f/a/FU7i7dTH_Qa7ebuEdm_nbA~~/AAAAfQA~/RgRoYCv2P0SRaHR0cHM6Ly93d3cuYm94YmUuY29tL3Vuc3Vic2NyaWJlP3RjX3NlcmlhbD02MDMyNjg4NzAwMCZ0Y19yYW5kPTczNDQ4NjgwOCZ1dG1fc291cmNlPXN0ZiZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jYW1wYWlnbj1DTl9TVERXX3Y2JnV0bV9jb250ZW50PTAwNFcDc3BjQgpmffamfWYB-BBiUhtGYXJlSW5mcmFjdGlvbkB0cmFuc2xpbmsuY2FYBAAADTA~
-
https://info.sparkpost.com/f/a/qzUqqd17t4l8VUs7HEDfYA~~/AAAAfQA~/RgRoYCv2P0SJaHR0cHM6Ly93d3cuYm94YmUuY29tL2Nycz90Y19zZXJpYWw9NjAzMjY4ODcwMDAmdGNfcmFuZD03MzQ0ODY4MDgmdXRtX3NvdXJjZT1zdGYmdXRtX21lZGl1bT1lbWFpbCZ1dG1fY2FtcGFpZ249Q05fU1REV192NiZ1dG1fY29udGVudD0wMDJXA3NwY0IKZn32pn1mAfgQYlIbRmFyZUluZnJhY3Rpb25AdHJhbnNsaW5rLmNhWAQAAA0w
-
https://info.sparkpost.com/q/4ZycHZWwjUAhqcEtRgy_1A~~/AAAAfQA~/RgRoYCv2PlcDc3BjQgpmffamfWYB-BBiUhtGYXJlSW5mcmFjdGlvbkB0cmFuc2xpbmsuY2FYBAAADTA~
-
https://info.sparkpost.com/q/_VyS-6SaDFZK6Vcm_VpF0g~~/AAAAfQA~/RgRoYCv2PVcDc3BjQgpmffamfWYB-BBiUhtGYXJlSW5mcmFjdGlvbkB0cmFuc2xpbmsuY2FYBAAADTA~
-
https://rmgf6oz1.emltrk.com/v2/rmgf6oz1?d=
-
https://rmgf6oz1.emltrk.com/v2/rmgf6oz1?f&d=')
-
https://rmgf6oz1.emltrk.com/v2/rmgf6oz1?p&d=');
-
https://rmgf6oz1.emltrk.com/v2/rmgf6oz1?rd&d=');
-
https://rmgf6oz1.emltrk.com/v2/rmgf6oz1?rl&d=');
-
https://sydxobh.tst.sparkpostopens.com/p/v1?tlid=g6lo31popa&cid=&sid=&rid=
-
https://sydxobh.tst.sparkpostopens.com/p/v1?tlid=g6lo31popa&cid=&sid=&rid=
-
https://z9fz0ai.stg.sparkpostopens.com/p/v1?tlid=ryj1uujf3e&cid=&sid=&rid=
-
https://z9fz0ai.stg.sparkpostopens.com/p/v1?tlid=ryj1uujf3e&cid=&sid=&rid=
- Show all
-