Overview

overview

3

Static

static

1

Remittance...msg.7z

windows7-x64

3

Remittance...msg.7z

windows10-2004-x64

3

Resubmissions

05/07/2024, 05:32

240705-f8h8qstcrl 5

05/07/2024, 05:19

240705-fz8f9stbrr 3

Sharing

Copy URL Twitter E-mail

General

  • Target

    Remittance Advice for EFT Direct Payment - July 5 2024.msg.7z

  • Size

    19KB

  • MD5

    830377a9df60290519ccf2f70862c541

  • SHA1

    977269260a1ebec5255d5de551d9107fb82cf21f

  • SHA256

    ece275137ed00728119f2d1692b84c50b50293cea822e916509b7f111c8ad5bd

  • SHA512

    4cfc0e1b4081d40174f89b831821d198dc942c4d1a52af92eac62aecc0119603b9e6d51ffc280517ec23f258f79e16f61571ca687b701c859725a84e94b46984

  • SSDEEP

    384:WIKG8R1NYmxLfLywuFNumq8CtFEsVBnZuCjuEpvYiZZ3Tn8Aq:+2wuFwmqhtGsVBTTYizVq

Score
1/10

Malware Config

Signatures

Files

  • Remittance Advice for EFT Direct Payment - July 5 2024.msg.7z
    .7z

    Password: infected

  • Remittance Advice for EFT Direct Payment - July 5 2024.msg
    .msg

    • http://docusignonedrive.com

    • https://click.emsnd.net/clickEvent?token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzUxMiJ9.eyJjYW1wYWlnbklkIjoiZmI0ZGYyYTgtM2E2My0xMWVmLTljYjktMmZjZmI5YmI2NGU0IiwiZW1haWwiOiJwYXVsLmN1cnRpc0BjZW50cmFsaWFuLmNvbS5hdSIsImlhdCI6MTcyMDE0NDAyMCwiZXhwIjoyMDM1NTA0MDIwfQ.TCLETgDf-hvOuVuEeAMyW9WRsGFWQ6Rf7GYw2-TUmh2_t-8ysfolFb3pvG64QTx0yiAuOYPOq9iPASluPJtBGLywlnKEbAVNXFHHehD7_lonqzVcUdKDVAko7w0p6Csygw7fBgTc_zDr5N6wt7xjwtkcD7cEGbIQv3JQxUR3HHBj-4PkAFOFb762obMtEK_vvnuLzOYPJn0x1XNxjWiTn9AlmeMeL00FjKoCcUSkbKbOHGHHfJt2lq4oZgQ5YljknwMfUbifVyUVG-bgDleNBNyokO8a88fjhViJdgl7-NRF0hLT09Pvy9Edja4TKbXveCX_BFKaeSl60BWJ3Eoau4wi_DdZTAhaw7zStA31soTTO2kFtcy9gzULhT7FwBraRyM8N4_Ern0n8fq3WVHWFasfaCVhliip8GQsk5G8TrmjcXJ75nalOF3k6yLl-8iYRnPP1hGwMxxMwH1jfe7BrKy6_sasIRYZYudO3c41tHifg7VZPlbdgQzTiGvTrExJXArLZrn4g7mPgnDKPYaxyGjuGkJhDiGWEHYhnEtcyJeiFmdfIoNk0Lz1fizElpNFazrxvFVyfERKtN4e1zre53M8xjoZ8O8y1CotCTM-rN2gogj9yX-jikKt-j6fNZf3mk2jvkf7U8IFFpcoU4iw9jIE4GOf6xC7e2ccHVjlG_I&url=https%3A%2F%2Fdsesignandprint.com%2Feft.html&urlId=a3ba0302-3a67-11ef-8c9e-8f206a5235c5

    • https://click.emsnd.net/clickEvent?token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzUxMiJ9.eyJjYW1wYWlnbklkIjoiZmI0ZGYyYTgtM2E2My0xMWVmLTljYjktMmZjZmI5YmI2NGU0IiwiZW1haWwiOiJwYXVsLmN1cnRpc0BjZW50cmFsaWFuLmNvbS5hdSIsImlhdCI6MTcyMDE0NDAyMCwiZXhwIjoyMDM1NTA0MDIwfQ.TCLETgDf-hvOuVuEeAMyW9WRsGFWQ6Rf7GYw2-TUmh2_t-8ysfolFb3pvG64QTx0yiAuOYPOq9iPASluPJtBGLywlnKEbAVNXFHHehD7_lonqzVcUdKDVAko7w0p6Csygw7fBgTc_zDr5N6wt7xjwtkcD7cEGbIQv3JQxUR3HHBj-4PkAFOFb762obMtEK_vvnuLzOYPJn0x1XNxjWiTn9AlmeMeL00FjKoCcUSkbKbOHGHHfJt2lq4oZgQ5YljknwMfUbifVyUVG-bgDleNBNyokO8a88fjhViJdgl7-NRF0hLT09Pvy9Edja4TKbXveCX_BFKaeSl60BWJ3Eoau4wi_DdZTAhaw7zStA31soTTO2kFtcy9gzULhT7FwBraRyM8N4_Ern0n8fq3WVHWFasfaCVhliip8GQsk5G8TrmjcXJ75nalOF3k6yLl-8iYRnPP1hGwMxxMwH1jfe7BrKy6_sasIRYZYudO3c41tHifg7VZPlbdgQzTiGvTrExJXArLZrn4g7mPgnDKPYaxyGjuGkJhDiGWEHYhnEtcyJeiFmdfIoNk0Lz1fizElpNFazrxvFVyfERKtN4e1zre53M8xjoZ8O8y1CotCTM-rN2gogj9yX-jikKt-j6fNZf3mk2jvkf7U8IFFpcoU4iw9jIE4GOf6xC7e2ccHVjlG_I&url=https%3A%2F%2Fdsesignandprint.com%2Feft.html&urlId=a3ba0302-3a67-11ef-8c9e-8f206a5235c5

    • https://mail-tools-public.s3.amazonaws.com/gallery/images/uploads/90ed0423d6e65191369a9fa41f65a951c6b1baf1/e3c2f185511c895c4cf27d3dd53a5386602dd525.png

    • https://open.emsnd.net/openEvent?token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzUxMiJ9.eyJjYW1wYWlnbklkIjoiZmI0ZGYyYTgtM2E2My0xMWVmLTljYjktMmZjZmI5YmI2NGU0IiwiZW1haWwiOiJwYXVsLmN1cnRpc0BjZW50cmFsaWFuLmNvbS5hdSIsImlhdCI6MTcyMDE0NDAyMCwiZXhwIjoyMDM1NTA0MDIwfQ.TCLETgDf-hvOuVuEeAMyW9WRsGFWQ6Rf7GYw2-TUmh2_t-8ysfolFb3pvG64QTx0yiAuOYPOq9iPASluPJtBGLywlnKEbAVNXFHHehD7_lonqzVcUdKDVAko7w0p6Csygw7fBgTc_zDr5N6wt7xjwtkcD7cEGbIQv3JQxUR3HHBj-4PkAFOFb762obMtEK_vvnuLzOYPJn0x1XNxjWiTn9AlmeMeL00FjKoCcUSkbKbOHGHHfJt2lq4oZgQ5YljknwMfUbifVyUVG-bgDleNBNyokO8a88fjhViJdgl7-NRF0hLT09Pvy9Edja4TKbXveCX_BFKaeSl60BWJ3Eoau4wi_DdZTAhaw7zStA31soTTO2kFtcy9gzULhT7FwBraRyM8N4_Ern0n8fq3WVHWFasfaCVhliip8GQsk5G8TrmjcXJ75nalOF3k6yLl-8iYRnPP1hGwMxxMwH1jfe7BrKy6_sasIRYZYudO3c41tHifg7VZPlbdgQzTiGvTrExJXArLZrn4g7mPgnDKPYaxyGjuGkJhDiGWEHYhnEtcyJeiFmdfIoNk0Lz1fizElpNFazrxvFVyfERKtN4e1zre53M8xjoZ8O8y1CotCTM-rN2gogj9yX-jikKt-j6fNZf3mk2jvkf7U8IFFpcoU4iw9jIE4GOf6xC7e2ccHVjlG_I

    • https://unsubscribe.emsnd.net/?token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzUxMiJ9.eyJjbGllbnQiOiI4ZTJmZGU5NC0zODBmLTExZWYtOWNmZC01MWJhNmExN2I4YWYiLCJjYW1wYWlnbiI6ImZiNGRmMmE4LTNhNjMtMTFlZi05Y2I5LTJmY2ZiOWJiNjRlNCIsInJvbGUiOjMsImVtYWlsIjoicGF1bC5jdXJ0aXNAY2VudHJhbGlhbi5jb20uYXUiLCJsYW5ndWFnZSI6ImVuIiwiY29udGFjdCI6ImU3NmE2MjU4LTNhNjMtMTFlZi04MmEwLWEzMzBjNjg1YTc4ZiIsImlpcCI6IjEyNy4wLjAuMSIsIm1vYmlsZSI6ZmFsc2UsImV4cCI6MjAzNTUwNDAyMH0.XpORbf_2jdnSwp08fFO4WP0fxidU4NnxMpOtbe6C0VuUGjeC6xDQUghkQMYFPp9qEYzcFrlfEqjPX5RV5-AML979XW6JvbV7HSIVrQXsy1ETKpBcN12SkrVbmla6Kvr85Q2DL_0OGoJp32TzNp97J0tQgJ6y4r6EAJuecrAPVNJd53tGN5-cSq8pHUaOM5oDOTxJCHfZI4wulWhaQZJPZ9CeecfMAXS832Le7c2fxblJdtlJrMHV7p2bAyQlMTXzJsGPk1cmIjrQfEc9_6KR-sXVT2XDNoKpjUsyKUT23n6oCmtV07od2mF9rSIAWCtJ97k2Rt65ZMeUeCoFumoO9TP3SFKC0t1CRRbuCLSjPbXZGvJVVsRMmmJzmN95RJmGxijCz14IL2ANB_Kub_FmJb_-GARfMJPg8_jXZE5fZIS2Mp1zsGMmHx3DMJA9BvQagWoQCMexVK9hZ4KYqejSrwMNzrUelsQkdTIoOE7BAXe74QqRI4f0JuBEKEYSIcIQ-HOBgc0zSkUOijJg-mesqHeY-VJl22pbSKPG6KJrjnQ4Vhw8CrnIhAWcyTeeDVDEiCRCcpRZlZgM3YVhl6aFU55KY8yJf9xAJK38AIogJKWFsoboJKzCI3g5wQ9BtBukkKKt91xuDhEjdo36zcK8WHns1eTUxVvvfJpecnAmQMo