Resubmissions

10/07/2024, 17:15

240710-vstf4ascrc 5

10/07/2024, 16:26

240710-txxhwazfrb 5

General

  • Target

    Fw ReminderFile_Transfer_5335July 10 2024.eml

  • Size

    204KB

  • MD5

    86683d9800d081a7bd6a651036beb48d

  • SHA1

    ffa2d4afeb62f3fb8135464f54160385c755ecf8

  • SHA256

    135e295f2203337c49f84ffc125cb3f1877588c90a90ac505b041d8b1168b90a

  • SHA512

    db4c948174e86ff2e51588603f6cce8c8bbf0dc8f1092314fe2d9f2f2d0c9c523363d108657b661549886d3203e64a4e1fe80b87a37ceae2c75ea4c99804ed93

  • SSDEEP

    3072:2zMpC/iGuXz31kO8YEhIhwp6i0u0eBEdVn/ZYFoH0QBuAZ8CLrDdm0y13BMAi:2zMpCqFX7Vxk6zqEdVuFUuK8ErDdm0c4

Score
4/10

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

Files

  • Fw ReminderFile_Transfer_5335July 10 2024.eml
    .eml
    • http://www.crownagentsbank.com/

    • http://www.ttech.com.jm%20

    • https://aka.ms/o0ukef

    • https://ttech.com.jm/ttech/wp-content/uploads/email_signatures/TechCon_2024_Email_Signature_May_2024.png]

  • Outlook-mhyl1m2d.png
    .png
  • PaymntCompleted_30245098.pdf.pdf
    .pdf
    • http://docusign.com

    • https://d%61rkr%65m%61%69ns%2ecom/404%2ephp?7-797967704b536932307463767955684e79732f504c7338767969306f7973394b545337524b3034713173394e43596e4d4277413d-amFsZWVsLmhlbnJ5QHR0ZWNoLmNvbS5qbQ==

  • email-html-2.txt
    .html
  • email-plain-1.txt